Security Engineer (Remote)

Looking for PURPOSE? At GovStar, we found it. We love the work we do, the people we do it with, and the impact we have. We’re looking for talented technologists and creatives with the character, courage, and commitment to achieve greatness and grow together.

We’re a tight group of individuals coming together to produce Legendary Teams. We use technology and creativity to unlock the future of government and shape a brighter future for the country we love.

Discover us @ www.govstar.us

Overview

GovStar seeks a Security Engineer to safeguard mission-critical AI, data analytics, and enterprise technology capabilities supporting a national security customer. This is a hands-on security engineering role focused on designing, implementing, validating, and operating security controls that protect sensitive investigative data while enabling secure delivery of modern AI and analytics capabilities.

The Security Engineer will work across applications, data platforms, cloud infrastructure, and DevSecOps workflows to implement access controls, encryption, security monitoring, logging, vulnerability management, secure application patterns, and continuous compliance. The role also supports Authority to Operate (ATO) activities, incident response, forensic analysis, and security documentation within Azure Government and other regulated federal environments.

Success in this role requires more than compliance knowledge. GovStar is looking for a technically strong, highly accountable engineer who can identify risk, communicate clearly, work effectively with federal customers and technical teams, and proactively drive security issues through resolution.

Responsibilities

• Design, implement, and maintain security controls across AI platforms, enterprise data environments, cloud infrastructure, and mission applications, including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege policies.
• Implement and enforce role-based access control (RBAC), data security policies, and protective measures for sensitive data, including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) information, consistent with customer and DHS requirements.
• Integrate applications, data platforms, and cloud infrastructure with approved Security Information and Event Management (SIEM) platforms and log aggregation tools to support monitoring, alerting, investigation, and incident response.
• Monitor and analyze security logs, access patterns, and user behavior to identify unauthorized access attempts, anomalous activity, data exfiltration risks, and other potential security incidents across application, data, and infrastructure layers.
• Support ATO and continuous monitoring processes, including security control implementation, control documentation, security testing coordination, vulnerability assessment, remediation tracking, evidence preparation, and ongoing compliance activities aligned with NIST SP 800-53, FedRAMP, FISMA, and customer requirements.
• Perform or coordinate security testing, including vulnerability assessments, penetration testing, secure code review, configuration assessments, and validation that pilot and production systems meet applicable security requirements.
• Implement and validate application-level security controls, including input validation, output encoding, authentication and authorization, session management, secure API design, and protections against OWASP Top 10 vulnerabilities.
• Provide forensic analysis and incident response support, including server or virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical documentation or declarations for investigative or administrative matters.
• Coordinate with cybersecurity teams, privacy officers, cloud/platform engineers, DevSecOps teams, application developers, and Authorizing Officials to maintain an integrated security posture and alignment with enterprise security policies and continuous monitoring programs.
• Develop and maintain clear security documentation, including security architecture diagrams, control implementation evidence, configuration standards, incident response procedures, security operating procedures, and knowledge-transfer materials.
• Communicate risks, dependencies, technical challenges, and recommended remediation actions proactively to customers, teammates, and leadership.
• Contribute to GovStar knowledge sharing, continuous learning, innovation initiatives, onboarding, and other internal efforts that strengthen the broader team.

Minimum Requirements

• U.S. citizenship is required.
• Must currently reside in the United States.
• Must reside within the Eastern or Central Time Zone.
• Ability to obtain and maintain DHS Public Trust / EOD suitability.
• Bachelor’s degree plus at least 7 years of experience in cybersecurity, information security, security engineering, or a related field.
• Proven hands-on experience implementing security controls, identity/access management, encryption, and logging/monitoring solutions for enterprise applications and cloud infrastructure.
• Strong understanding of federal security requirements, including NIST SP 800-53, FedRAMP, and FISMA, with experience supporting ATO and continuous monitoring processes.
• Hands-on cloud security experience in Azure, AWS, or GCP, including identity and access management, network security, encryption/key management, and security monitoring. Azure and Entra ID experience are strongly preferred.
• Demonstrated experience with SIEM platforms, security log analysis, monitoring, intrusion detection, incident investigation, and incident response practices.
• Strong understanding of secure application engineering principles, including authentication, authorization, API security, vulnerability management, and common web application risks.
• Strong analytical and problem-solving skills, sound technical judgment, and the ability to investigate complex security issues across multiple technology layers.
• Excellent written, verbal, and interpersonal communication skills.
• Ability to work independently, manage responsibilities proactively, identify issues before they become blockers, and drive problems through resolution with limited oversight.
• Strong attention to detail and commitment to producing high-quality, accurate technical work and documentation.

Preferred Requirements

• Experience securing AI/ML applications, generative AI systems, data analytics platforms, or sensitive data environments.
• Experience supporting federal government, law enforcement, homeland security, intelligence, or other national security missions, including investigative data handling requirements.
• Hands-on experience with Azure Government or AWS GovCloud and implementation of security controls in FedRAMP High, DoD Impact Level, or similarly regulated environments.
• Experience with Microsoft security tooling such as Microsoft Sentinel, Defender for Cloud, Azure Monitor, Entra ID, Key Vault, Azure Policy, or equivalent cloud security services.
• Experience working in DevSecOps environments with CI/CD, infrastructure as code, automated security scanning, configuration management, and continuous compliance practices.
• Experience with Zero Trust architecture and modern identity-centric security patterns.
• Professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), Security+, or equivalent.

GovStar Expectations

• Passion for solving complex technical challenges in support of U.S. national security objectives.
• High ownership, initiative, and self-direction; willingness to start, lead, and improve work rather than waiting to be told what to do.
• Strong instincts for proactive communication, managing up, surfacing risks early, and keeping customers and teammates informed.
• Ability to build trusted working relationships with federal customers, partners, and GovStar teammates.
• Curiosity and a continuous-learning mindset, including willingness to stretch beyond established areas of expertise.
• Commitment to GovStar’s collective growth through knowledge sharing and participation in internal initiatives, innovation efforts, onboarding, and business-development support.
• Professionalism, humility, customer empathy, accountability, and a collaborative, team-first mindset.
• Consistent attention to detail in written communication, technical documentation, and customer-facing deliverables.

Relevant Technologies & Frameworks

Azure Government; Microsoft Entra ID (Azure AD); Microsoft Sentinel or other SIEM platforms; Defender for Cloud; Azure Monitor; Key Vault; Azure Policy; NIST SP 800-53; FedRAMP; FISMA; ATO / continuous monitoring; RBAC / IAM; encryption and key management; OWASP Top 10; vulnerability management; secure APIs; DevSecOps; CI/CD; Git-based workflows; Docker / Kubernetes; Terraform or other infrastructure-as-code tooling.

Compensation & Benefits

• Compensation will vary based on experience and qualifications. We’re happy to discuss compensation expectations early in the process so neither side wastes time.
• GovStar benefits include medical, dental, and vision coverage; 401(k) matching; paid time off; and an employee shares program.