Lead Security Engineer

Leading application security efforts in a full-time capacity, the Lead Security Engineer will provide technical and management leadership on a cloud-native federal modernization program, implementing DevSecOps methodologies and Zero Trust principles while interfacing with senior stakeholders. Key responsibilities Lead the design and implementation of application security solutions throughout the System Development Life Cycle (SDLC) Direct vulnerability assessments, penetration testing, and threat modeling to identify and remediate security weaknesses Support the Authorization to Operate (ATO) process, including security control assessments and management of security artifacts Required qualifications Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field 15+ years of relevant IT/cybersecurity experience with a focus on technical and management leadership Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP) Expertise in integrating security into a DevSecOps SDLC and implementing Zero Trust Architecture Experience managing the ATO lifecycle and security artifact collection