Lead Security Engineer

Lead Security Engineer

Edge Theory is looking for a Lead Security Engineer to own our security program end to end — spanning application security, AWS infrastructure, endpoints, and facilities — and to lead our path toward FedRAMP and DoD Impact Level authorization. This is a senior, high-trust role reporting directly to the CTO, working hand in hand with the engineering team.

RESPONSIBILITIES

• Own Edge Theory's overall security posture across code, cloud, endpoints, and facilities
• Design and maintain hardened AWS infrastructure (IAM, network segmentation, encryption, key management, logging)
• Lead the effort toward FedRAMP (Moderate/High) and DoD Impact Level (IL4/IL5) authorization — control mapping, documentation, POA&M, and continuous monitoring — with a roadmap toward IL6
• Establish secure coding standards and embed security review into the engineering workflow and CI/CD pipeline
• Secure infrastructure-as-code and deployment automation (Open Tofu, Jenkins CI/CD)
• Manage secrets, credentials, and key material across build and deployment systems using Open Bao
• Stand up vulnerability management — scanning, prioritization, and remediation tracking
• Deploy and monitor detection and logging (Datadog, AWS Guard Duty / Security Hub / Inspector)
• Lead incident response: detection, containment, investigation, and post-incident review
• Administer endpoint and mobile device security (laptops, phones) — hardening, MDM, encryption
• Own physical and facility security across the Edge Theory lab and satellite offices (door access, badging, visitor control)
• Work closely with the engineering team to make secure-by-default the path of least resistance
• Track evolving DoD and federal compliance requirements and translate them into concrete controls

QUALIFICATIONS

• 5+ years in security engineering, infrastructure security, or security operations
• Deep hands-on AWS security experience (IAM, VPC design, KMS, Guard Duty, Security Hub, Cloud Trail) on Amazon Linux
• Strong working knowledge of NIST 800-53 controls and continuous monitoring practices
• Experience taking an organization through — or materially supporting — a FedRAMP and/or DoD IL authorization
• Secure SDLC / Dev Sec Ops  experience: secure coding standards, SAST/DAST, pipeline security
• Experience securing CI/CD and infrastructure-as-code (Jenkins, Open Tofu, or similar)
• Experience with secrets management (Open Bao / Hashi Corp Vault, or similar)
• Experience with observability and detection tooling (Datadog or similar SIEM/monitoring)
• Experience hardening database and search infrastructure (MySQL, Elasticsearch)
• Solid IP networking fundamentals (TCP/IP, DNS, TLS, segmentation)
• Ability to script and automate in Python, Bash, or similar
• Identity and access management design experience (SSO, LDAP, least-privilege enforcement)
• Experience managing and securing a device fleet (endpoint hardening, MDM)
• Excellent written and verbal communication — able to write control documentation and brief both engineers and leadership
• Must be a U.S. citizen (required for DoD IL5 personnel access)

PREFERRED

• Experience in a regulated defense, govtech, or federal environment
• SIEM operations and incident response experience
• Familiarity with SOC 2 and/or ISO 27001
• Relevant certifications (CISSP, AWS Security Specialty, CKS)
• Experience securing AI/LLM systems and data pipelines
• Prior work with AWS Gov Cloud
• Physical security / facility access control experience
• Experience with CMMC

LOCATION

Flexible – Primarily remote with the option to work from our Oxford, MS headquarters as needed.

If interested in applying, please send a message or email your resume to