> Markdown version of [/jobs/ext/2555633-security-engineer](https://www.wearedevelopers.com/jobs/ext/2555633-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Airspace
- **Location:** Boston, MA, United States
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Engineering, Configuration Management, Python (Programming Language), Systems Development Life Cycle, Security Information and Event Management, Kubernetes, Microsoft Sentinel, Software Coding, Terraform, Splunk, Network Server, Vulnerability Analysis
- **Published:** August 25, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=61af8f2614093d68

## About the Role

* Demonstrated coding skills in Python/Rust
 * Knowledge of container and CI/CD security (Kubernetes, image hardening, vulnerability scanning)
 * Investigate & remediate vulnerabilities, escalating complex issues when needed
 * Supply chain security experience (SBOM, artifact generation, dependency management)
 * Lead threat modeling sessions using established industry methodologies (e.g., STRIDE, PASTA, etc.)
 * Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
 * Practical exposure to federal security frameworks (CMMC, NIST 800-53, FedRAMP).
 * Experience securing government cloud environments (AWS GovCloud), ensuring compliance with federal security requirements.
 * Hands-on experience with cloud-native incident alerting services (e.g., AWS GuardDuty/Security Hub, Azure Defender, etc.)
 * Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints
 * Monitor security events using SIEM tools (Microsoft Sentinel, Splunk)
 * Collaborate with product, Platform, and compliance teams to embed security in the SDLC
 * Support incident response and post-incident review, growing toward leading these efforts over time, * Security Clearance: Must be eligible to obtain DoD clearance.
 * Citizenship: U.S. citizenship is required for this position.
 * On-Site Presence: Ability to work in our Boston (BOS) office at least three days per week

## Description

Air Space Intelligence is building mission-critical, secure infrastructure for defense and intelligence applications. We are seeking a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government security standards. As a Security Engineer, you will help harden and maintain ASI's cloud and endpoint environment (AWS GovCloud and Microsoft GCC High) while supporting compliance with U.S. government security standards (e.g., NIST 800-171/CMMC and NIST 800-53).


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)