> Markdown version of [/jobs/ext/4646282-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/4646282-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Engineer - **Company:** Kaizen Laboratories Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Application Layers, Software as a Service, Continuous Integration, Information Technology Security Auditing, Cloud Platform System, Delivery Pipeline, Terraform - **Published:** November 9, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-security-engineer-washington-dc--c6c12c78-fb9d-423b-8fa6-f27fce9aa3f1 ## About the Role Federal Government, Artificial Intelligence (AI), Unmanned Aircraft Systems (UAS), Purchasing/Procurement, Carpentry, United States Department of Defense (DoD), U.S. National Institute of Standards and Technology (NIST), Technical Writing, Machine Tool, Security Auditing, * 5+ years of hands-on experience building and securing cloud-native platforms in AWS and Terraform. You can architect controls and also implement them yourself * Direct experience with federal authorization work in FedRAMP, CMMC, DoD IL, or comparable regulated environments. You dont need to have shepherded a full authorization across the finish line, but youve done enough of the real work to know what it takes * Deep familiarity with NIST 800-53 and the ability to translate controls into pragmatic engineering work rather than checkbox compliance * Strong working knowledge of modern supply chain security: SBOMs, image signing, workload identity, secure CI/CD * Track record operating effectively in early-stage or fast-moving environments where you set the bar rather than inherit it Strong Candidates May Also... * Have supported federal SaaS, defense tech, or regulated infrastructure companies through accreditation * Have led a company through its first federal authorization rather than maintaining an existing one * Have hands-on experience with Chainguard, AI-powered security tooling, or similar leverage-multiplying platforms * Have worked with platforms like Second Front or similar federal compliance accelerators ## Description Kaizens platform reaches 40M residents across 50+ agencies in 17 states. Weve already signed multiple federal customers with many more in the pipeline, and the work of making Kaizen federal-ready is currently spread across a handful of engineers. That doesnt scale. Were hiring our first dedicated security engineer to sit on the platform team and own this end to end: architect the controls, write the SSPs, and partner with engineering to embed compliance into how we ship rather than bolt it on after. Location This is a hybrid role based out of our New York City HQ. Candidates must reside in New York or be able to commute to New York City to work out of our office at least three times a week (Tuesdays - Thursdays). What Youll Do * Architect and operationalize security across infrastructure, platform, CI/CD, and application layers, with a focus on AWS (including GovCloud) and Terraform * Lead readiness across federal compliance frameworks (FedRAMP, CMMC, and DoD Impact Levels), translating NIST 800-53 and related controls into real engineering implementations, and owning the SSPs, POA&Ms, and technical policy documentation * Build continuous compliance and audit-readiness workflows that make accreditation a byproduct of how we ship, not a separate workstream * Be smart about AI and tooling. Use automated AI-driven security scanning, modern hardened-image platforms like Chainguard, and other leverage points to multiply the impact of a small security team * Establish secure software supply chain practices: SBOMs, image signing, workload identity, and hardened deployment pipelines * Own the technical relationship with assessors, auditors, and federal security stakeholders. You are the credible technical voice in those rooms * Drive a secure-by-default engineering culture so residents and public servants can trust the systems we put in front of them