Tech Lead - Security Remediation Standards

Salary: $123,000 - 163,000 per year Requirements:

• 10+ years of software engineering experience across the full development lifecycle, including Tech Lead roles
• Experience designing and operating CI/CD, build, or developer platform capabilities adopted at scale across multiple development teams
• Experience working in Linux environments; Windows experience is preferred
• Experience delivering in regulated environments with audit and evidence obligations
• Experience in a shared-services or centralized delivery model supporting multiple application teams with competing priorities
• Demonstrated ability to drive adoption of engineering standards across teams outside direct reporting lines
• Experience with container build systems, including base images, multi-stage builds, minimal and hardened images, and runtime impacts of adoption
• Experience with vulnerability management, including interpreting scanner findings, assessing exploitability and reachability, prioritizing issues, defining compensating controls, and documenting exceptions
• Working proficiency in Java, .NET, and Python to specify and review code changes
• Experience developing test strategies for request-serving services and batch and pipeline workloads, including output-correctness verification
• In-depth knowledge of AWS or Azure
• Experience with CI/CD tooling and pipeline automation, such as Jenkins, GitHub Actions, GitLab, or equivalent
• Experience with infrastructure as code, such as Terraform, Ansible, or equivalent

• Translate InfoSec control requirements into scoped engineering work with acceptance criteria and audit evidence
• Create and maintain development tickets with clear requirements and measurable outcomes
• Classify applications by build and runtime characteristics, and maintain the classification as the estate changes
• Establish or specify the tooling, environments, and pipeline capabilities needed to deliver and validate standards at scale
• Design, build, and maintain hardened reference implementations for each application type
• Define migration paths for end-of-life runtimes and frameworks, and identify workloads where retirement or replacement is more cost-effective than remediation
• Analyze scan findings and exception requests to assess exploitability, identify false positives, and specify compensating controls when remediation is not viable
• Define acceptance criteria and rollback procedures with application owners before production implementation, escalating unresolved ownership issues
• Ensure remediation evidence is generated through the build rather than assembled manually
• Provide technical direction to remediation engineers working to published standards
• Produce standards documentation, migration procedures, developer guidance, and remediation evidence

• AWS
• Ansible
• Azure
• CI/CD
• GitHub
• GitLab
• Support
• Java
• Jenkins
• Linux
• Python
• Security
• Terraform
• Windows
• ASP.NET
• Cloud
• AI
• LESS

More:

We are recruiting for a remote Tech Lead to support our clients BC2 remediation program within Data Engineering. This centralized role will establish and validate application security standards across the program. We offer eligible employees medical, dental, and vision insurance, HSA and FSA options, 401(k), and life, disability, and ADD insurance. Salaried employees receive paid time off; hourly employees generally do not, except where required by law, and hourly employees on Service Contract Act projects are eligible for paid sick leave. This role is not eligible for bonuses, incentives, or commissions. Compensation is determined by factors including education, qualifications, certifications, experience, skills, seniority, location, performance, union contract, and business needs, and may be adjusted consistent with applicable law. We are an Equal Opportunity/Affirmative Action Employer and consider qualified applicants without regard to protected characteristics.

last updated 41 week of 2026