Lead Security Engineer

Sierra Business Solution LLC

United States

2 days ago

Apply on www.dice.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

7 years minimum

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Application Programming Interfaces (APIs) Audit Trail Cloud Computing Cloud Computing Security Cloud Engineering Cloud Storage Cyber Security System Configuration Identity and Access Management Information Systems Security Architecture Professional Python (Programming Language) Software Vulnerability Management

+16 more

Data Logging Scripting Google Cloud Cloud Platform System Event Processing Language Amazon Virtual Private Cloud (VPC) Kubernetes Information Technology Tenable Nessus Nessus Codebase CIS Benchmarks Software Version Control Devsecops Qualys Vulnerability Analysis

Job description

The Lead Security Engineer is the primary technical lead responsible for the end-to-end engineering and automation of the FedRAMP Key Security Indicator (KSI) initiative. This role bridges the gap between regulatory compliance and hands-on cloud engineering. The Lead Engineer will design automated cloud controls, manage Google Cloud Platform security vulnerability pipelines, and guide a technical team in deploying solutions that ensure continuous monitoring and secure architectures across Google Cloud Platform (Google Cloud Platform)., Technical Leadership & Translation: Lead discovery workshops to deconstruct FedRAMP KSIs and NIST SP 800-53 controls, translating high-level compliance mandates into binary, automatable technical specifications.

Vulnerability Management & Pipelines: Oversee and implement VM vulnerability scanning (AutoVM, Tenable, Qualys, Nessus), container image scanning (Artifact Registry Drydock), and staticdynamic analysis tools.

Automation & Scripting: Analyze Google Cloud Asset Inventory (CAI) schemas and oversee the authoring and testing of Common Expression Language (CEL) evaluation rules to define precise PassFail criteria for cloud controls.

Pipeline & Telemetry Architecture: Design, deploy, and troubleshoot log agents (FluentbitVector) and Cloud Logging sinks to ensure 100% telemetry coverage across container nodes, VMs, and control-plane APIs.

Identity & Access Management (IAM): Architect and enforce least-privilege IAM bindings, service accounts, and VPC Service Controls across the Google Cloud Platform environment.

Validation & Deployment: Test logic against synthetic resources in sandbox environments to minimize false positives, manage codebase version control (GitPiper), and support progressive deployment rollouts.

Cross-Functional Collaboration: Act as the technical bridge for the project, supporting gap analyses and providing engineering evidence to Governance teams and 3PAO assessors.

Requirements

Experience: 7+ years in Cloud Security Engineering, DevSecOps, or Infrastructure Security, with proven experience as a LeadSenior Engineer managing FedRAMP (ModerateHigh) security vulnerability implementations.

Cloud Platform Expertise: Strong, hands-on background in Google Cloud Platform (Google Cloud Platform), specifically with Cloud Asset Inventory (CAI), Security Command Center (SCC), IAM, Cloud Audit Logs, and Cloud Storage.

Scripting & Languages: Advanced proficiency in Common Expression Language (CEL). Working knowledge of Python, Go, or RegoOPA.

Vulnerability Tooling: Practical experience configuring and automating vulnerability and container scanning tools in a large-scale cloud environment.

Systems & Infrastructure: Experience with Google Cloud infrastructure and container orchestration (KubernetesGKEBorg).

Compliance Knowledge: Strong familiarity with automated control evaluation for NIST SP 800-53 Rev 5, CIS Benchmarks, and FedRAMP Continuous Monitoring (ConMon)., Education: Bachelor s or Master s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.