> Markdown version of [/jobs/ext/2273321-security-engineer](https://www.wearedevelopers.com/jobs/ext/2273321-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** STS Worldwide Inc.
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software Vulnerability Management, Scripting, Devsecops, Vulnerability Analysis
- **Published:** August 27, 2026
- **Apply:** https://www.dice.com/job-detail/1301599b-a8c6-4f67-ae16-c2ff8f1a0292

## About the Role

* 3+ years of security engineering experience, including cloud (AWS)
 * Experience with vulnerability management and security tooling
 * Working knowledge of NIST 800-53 / FedRAMP controls
 * Scripting/automation skills

Preferred Qualifications

 * Security certification (Security+, AWS Security Specialty, or similar)
 * Federal ATO / continuous-monitoring experience
 * Familiarity with AI-assisted security tooling

## Description

The Security Engineer implements and operates security controls for the platform on AWS. You will perform security testing, support ATO evidence and continuous monitoring, and remediate findings, helping keep a high-visibility federal filing platform secure and compliant., * Implement and configure security controls across the AWS environment

 * Perform vulnerability scanning, security testing, and remediation tracking
 * Support ATO evidence collection against NIST 800-53 / FedRAMP controls
 * Operate continuous-monitoring and threat-detection tooling
 * Partner with DevSecOps to automate security in the pipeline
 * Support incident response and forensics
 * Leverage AI-assisted security tooling for detection and triage


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)