Description

You own the security engineering function, driving compliance and risk reduction across the infrastructure.

This role is on-site.

Responsibilities

• Lead end-to-end SSP/SSPP development, maintenance, and updates.
• Own POA&M management and drive remediation to closure.
• Translate penetration testing and vulnerability findings into actionable remediation plans (EPICs/user stories).
• Coordinate re-testing and validation efforts with infrastructure, app, and security teams.
• Oversee risk-based vulnerability management and SLA-driven remediation.

Required Skills

• 12+ years in GRC, Enterprise Security, Security Architecture, Vulnerability Management, and Cloud/Hybrid Security.
• 10+ years owning SSP development end-to-end.
• 10+ years with CMS MARS-E v2.2 or similar federal/state frameworks.
• Strong expertise in NIST 800-53, NIST RMF, and privacy controls.
• Deep experience with POA&M tracking and remediation management.
• Strong knowledge of Secure SDLC and DevSecOps practices.
• Ability to produce assessor-ready documentation and audit evidence.

Key Skills

Education

Any Gradute