Security Engineer

Latitude is a growing Service-Disabled Veteran Owned company serving federal-sector clients. The Security Engineer will secure supply chain and logistics software for a federal health customer by designing and validating security controls, integrating security into delivery pipelines, testing systems for weaknesses, and supporting monitoring and incident response.

Responsibilities:

• Design, configure and validate security controls for applications and the environments they run in
• Test systems for weaknesses and drive findings to closure with the teams that own them
• Build security checks into the delivery pipeline so issues surface before release, not after
• Support monitoring, tuning and incident response for security tooling
• Translate security requirements into technical designs delivery teams can implement

Requirements:

• Bachelor's degree and 6+ years of security engineering experience
• Hands-on experience securing applications and cloud infrastructure
• Vulnerability assessment experience, including tracking findings through remediation
• Working knowledge of federal security frameworks such as NIST 800-53 and RMF
• Experience integrating security tooling into CI/CD pipelines
• Ability to obtain and maintain a federal background investigation (Public Trust)
• • Applicants need to be a US Citizen to be considered for the position and have physically resided in the United States for a minimum of 3 years due to background investigation requirements
• Experience on federal health IT programs
• HIPAA or health data privacy experience
• Security+, CISSP, CCSP or equivalent certification
• Container and Kubernetes security experience
• Incident response or digital forensics experience
• Experience supporting an ATO package or continuous monitoring
• Familiarity with federal IT governance and approved-tooling processes