Security & Compliance Engineer

About The Role

We are seeking a Security & Compliance Engineer to support the development and maintenance of secure, compliant technology environments. This role is ideal for an early-career security professional who has hands-on experience with security testing, cloud environments, and compliance frameworks and is looking to grow within a highly technical environment.

The ideal candidate will bring a strong understanding of security and compliance standards, with particular value placed on FedRAMP experience and experience working with government or highly regulated environments.

What You'll Do

• Support security and compliance initiatives across cloud-based environments.
• Conduct and support web application penetration testing and vulnerability assessments.
• Help implement and maintain security controls aligned with applicable compliance frameworks.
• Work with cloud environments such as AWS GovCloud, with equivalent experience in GCP or Azure also considered.
• Assist with security documentation, assessments, remediation efforts, and audit readiness.
• Collaborate with engineering and technical teams to identify and address security risks.
• Translate compliance requirements into practical technical controls and processes.
• Support continuous improvement of security posture and compliance programs.

What We're Looking For

• 1+ year of professional experience in security engineering, cybersecurity, compliance engineering, or a related field.
• Hands-on experience with web penetration testing or application security.
• Experience working with AWS GovCloud or comparable environments in GCP or Azure.

• Working knowledge of security and compliance frameworks, including:

• NIST

• CMMC

• SOC 2

• FedRAMP

• Ability to speak confidently and accurately about security controls, compliance requirements, and applicable frameworks.

• Strong analytical and problem-solving skills.

• Ability to work independently in a remote environment and collaborate effectively with engineering teams.

Preferred Qualifications

• FedRAMP experience — highly valued.
• Experience supporting government, federal, or regulated customers.
• Active or previously held security clearance.
• Experience with cloud security, vulnerability management, or security automation.
• Familiarity with security documentation and audit/compliance processes.

What Will Set You Apart

We're particularly interested in candidates who can go beyond simply listing compliance frameworks on a resume. The strongest candidates will be able to fluently discuss NIST, CMMC, SOC 2, and FedRAMP, explain how the frameworks differ, and connect compliance