Security & Compliance Engineer

About the Role

We are seeking a Security & Compliance Engineer to support the development and maintenance of secure, compliant technology environments. This role is ideal for an early-career security professional who has hands-on experience with security testing, cloud environments, and compliance frameworks and is looking to grow within a highly technical environment.

The ideal candidate will bring a strong understanding of security and compliance standards, with particular value placed on FedRAMP experience and experience working with government or highly regulated environments.

• Support security and compliance initiatives across cloud-based environments.

• Conduct and support web application penetration testing and vulnerability assessments.

• Help implement and maintain security controls aligned with applicable compliance frameworks.

• Work with cloud environments such as AWS Gov Cloud
  , with equivalent experience in GCP or Azure also considered.

• Assist with security documentation, assessments, remediation efforts, and audit readiness.

• Collaborate with engineering and technical teams to identify and address security risks.

• Translate compliance requirements into practical technical controls and processes.

• Support continuous improvement of security posture and compliance programs.

• 1+ year of professional experience in security engineering, cybersecurity, compliance engineering, or a related field.

• Hands-on experience with web penetration testing or application security.

• Experience working with AWS Gov Cloud or comparable environments in GCP or Azure.

• Working knowledge of security and compliance frameworks, including:

  • NIST

  • CMMC

  • SOC 2

  • FedRAMP

• Ability to speak confidently and accurately about security controls, compliance requirements, and applicable frameworks.

• Strong analytical and problem-solving skills.

• Ability to work independently in a remote environment and collaborate effectively with engineering teams.

• FedRAMP experience - highly valued.

• Experience supporting government, federal, or regulated customers
  .

• Active or previously held security clearance
  .

• Experience with cloud security, vulnerability management, or security automation.

• Familiarity with security documentation and audit/compliance processes.

We're particularly interested in candidates who can go beyond simply listing compliance frameworks on a resume. The strongest candidates will be able to fluently discuss NIST, CMMC, SOC 2, and FedRAMP
, explain how the frameworks differ, and connect compliance