Build and Lead the Federal Security Engineering Team
Recruit, hire, and onboard a team of cloud, SIEM, and SOC security engineers dedicated to our FedRAMP and IL4/IL5 environments, including candidates who meet U.S.-person and clearance requirements.
Define the hiring roadmap, role profiles, interview loops, and sequencing for the team as the federal program scales.
Lead, coach, and develop security engineers through regular 1:1s, goal setting, feedback, and career growth. Recognize and retain high performers.
Set priorities and operating rhythms that balance strategic investments, day-to-day engineering support, and incident response.
Lead horizontally with peers in commercial and partner teams.
Lead Federal Cloud Security Engineering
Set the technical direction for how the team secures our federal cloud environments, including identity and access, network segmentation, encryption and key management, hardening baselines, and logging.
Ensure cloud security engineers design and implement controls that meet FedRAMP and DoD Cloud Computing SRG requirements, and that those controls are automated through Infrastructure as Code and policy-as-code.
Review and approve team architecture decisions, threat models, and risk assessments for federal deployments and new features.
Partner with Engineering to embed security into the SDLC and CI/CD pipelines for federal workloads.
Set standards for identity and access management in federal environments, including least privilege, federated identity, and privileged access.
Qualification
A Team BuilderA Technical LeaderAn Automation AdvocateA Framework ThinkerOperationally DisciplinedExtreme OwnershipBackground in incident managementActive clearanceCertifications such as CISSP
Required
A Team Builder: You have created teams, not just inherited them. You hire for potential and craft, and you know how to build an organization that won't break when the business triples.
A Technical Leader: You stay close enough to the technology to set the bar, challenge designs, and earn your engineers' respect, while letting them own the work.
An Automation Advocate: You push your team to treat security and detection as engineering problems and to automate for security, not only speed.
A Framework Thinker: You can map a visibility or control gap to NIST 800-53, the DoD SRG, or MITRE ATT&CK and prioritize the fix.
Operationally Disciplined: You hold a high standard for documentation and process so the team stays effective as it grows.
Extreme Ownership: You are accountable for the team's outcomes, including reducing risk, MTTR, and false positives.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.
This job may require up to 5% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager.
Preferred
Experience standing up security capabilities for a SaaS product entering the federal market.
Prior experience operating within FedRAMP or DoD IL4/IL5 environments, in a hands-on or leadership capacity.
Background in incident management, detection engineering, or logs/events processing.
Experience with SOC build-out and scaling in a high-growth company.
Active clearance.
Certifications such as CISSP, CISM, CCSP, AWS Certified Security – Specialty, GCIH/GCIA, or similar.
