Security Compliance Engineer
Core
Own security compliance and assurance program, blending GRC with hands-on security operations and engineering to protect PII, PHI, and CUI for government clients.
Role type
Senior Security Compliance Engineer (GRC + Security Operations)
Builds
Audit-ready compliance packages, continuous monitoring programs, secure CI/CD pipelines, and cloud infrastructure configurations.
Domain
US Federal/State Government contracting, Healthcare, Cybersecurity
Required skills
GRC frameworks (NIST 800-171, 800-53, FedRAMP, CMMC, HIPAA), Security Operations (SOC, MDR, SIEM), Vulnerability Management, Cloud Security (AWS, Azure, Oracle), CI/CD Security, Infrastructure as Code (Terraform, CloudFormation), Incident Response, AI Security Governance
Preferred skills
CMMC Certified Professional (CCP), Cloud Security Certifications (AWS/Azure), Consulting/Government Contracting experience, GRC Platform automation (PowerShell, Python, Bash)
Technologies
NIST SP 800-171, CMMC, NIST SP 800-53 Rev 5, FedRAMP, TX-RAMP, StateRAMP, GovRAMP, HIPAA, ITIL 4, AWS, Azure, Oracle, Terraform, CloudFormation, GitHub Actions, GitLab CI, Jenkins, SIEM, MDR
Responsibilities
Maintain System Security Plans (SSPs), POA&Ms, and Incident Response Plans; Prepare ATO packages and serve as primary contact for 3PAOs and auditors; Run continuous monitoring and control assessments; Manage vendor-maintained SOC, MDR, and SIEM services; Execute vulnerability and patch management programs; Review infrastructure-as-code and cloud configurations for compliance; Integrate security controls into CI/CD pipelines; Support incident response and tabletop exercises; Govern AI tool usage and vendor risk.
Seniority
Senior, hands-on IC
