Security Engineer 4 - Lead

• Design and review security architectures, trust boundaries, defensive controls, and secure integration patterns.
• Engineer identity, endpoint, network, cloud, application, logging, vulnerability-management, and data-protection capabilities.
• Lead technical risk assessments, threat modeling, vulnerability analysis, remediation planning, and security testing.
• Support incident investigation, containment, recovery, root-cause analysis, and corrective actions.
• Set engineering standards, review designs, mentor contributors, and coordinate security work across programs.
• Support NIST, RMF, CMMC, FedRAMP, or contract-specific security documentation and evidence as applicable.

Why Join Centex Technologies

• Join an established small business with more than 20 years of experience supporting customers and solving complex technology and mission needs.
• Work remotely within the United States while contributing to meaningful customer outcomes.
• Take ownership of complex work and collaborate directly with experienced technical and program professionals.

Work Arrangement

This is a remote U.S. position. Occasional travel or work outside normal hours may be required based on customer and program needs.

Employment is subject to required background screening. Some assignments may require the ability to obtain and maintain a public trust determination or security clearance., * Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related field, or equivalent directly relevant experience.

• Seven or more years of cybersecurity or security engineering experience, including technical leadership of complex security work.
• Deep knowledge of security architecture, identity, networks, endpoints, cloud, vulnerability management, incident response, and secure engineering.
• Ability to lead risk-based decisions and produce clear technical and customer-facing documentation.

Preferred

• Experience supporting federal, defense, CUI, classified, FedRAMP, or other regulated environments.
• CISSP, CCSP, GIAC, Security+, cloud-security, or other role-relevant certification.
• Experience with RMF authorization packages, security automation, zero trust, or DevSecOps.