Lead Security Engineer

Title: Lead Security Engineer


Location: Remote / Hybrid (On site-visits to the DMV location as required by contract)


iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, DevOps, DevSecOps, data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise, results in innovative solutions.


We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment.


About this position:


The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census systems into a cloud-smart, data-centric, and secure IT environment.


This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure. The position plays a critical role in embedding security into DevSecOps pipelines and supporting secure, scalable, near real-time data processing and analytics.


*This position is contingent upon contract award.


Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications.


On a day-to-day basis, you will:

1. Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectives


2. Define and execute project goals, plans, and methods aligned with federal cloud modernization efforts


3. Direct security engineering activities across application development, integration, and operations environments


4. Ensure delivery of secure systems through DevSecOps practices and enterprise security governance


5. Lead implementation of application security controls, policies, and frameworks


6. Oversee security architecture standards, design reviews, and technical trade-off analyses


7. Support vulnerability management, security testing, audits, and authorization activities


8. Guide integration of security tooling into CI/CD pipelines and cloud-native environments


9. Manage staffing, delivery methods, and financial oversight for assigned security workstreams


10. Engage with client stakeholders and senior leadership through briefings, negotiations, and technical consultations


11. Supervise and mentor security engineering staff as assigned

Required Education/Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)


• 15+ years of experience in cybersecurity and/or security engineering role


• Demonstrated experience leading technical and management efforts on large-scale IT or federal programs


• Proven ability to define goals, plans, and execution strategies for complex security initiatives


• Experience interfacing with senior government or enterprise stakeholders

Cybersecurity Frameworks & Compliance

• NIST Risk Management Framework (RMF)


• NIST 800-53 security controls


• FedRAMP security requirements


• Security Authorization processes


• SSPs and POA&Ms


• Vulnerability management programs

Application & Software Security

• Secure Software Development Lifecycle (SSDLC)


• Application security architecture


• Secure coding practices


• SAST/DAST/SCA tools


• Dependency and vulnerability scanning


• SBOM processes


• API security

DevSecOps Security

• Security integration into CI/CD pipelines


• GitLab CI/CD security practices


• Jenkins security integrations


• Azure DevOps security controls


• Automated security testing

Cloud & Container Security

• AWS GovCloud, Azure Government, OCI Government, or GCP


• Cloud security architecture


• Kubernetes security


• Docker/container security


• Infrastructure-as-Code security reviews


• Terraform and CloudFormation security considerations

Security Operations

• SIEM platforms


• Security monitoring


• Threat detection


• Security analytics


• Continuous monitoring practices

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)


• Certified Cloud Security Professional (CCSP)


• Certified Information Security Manager (CISM)


• Certified Information Systems Auditor (CISA)

Please Note: We maintain an on-camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.


FLSA & EMPLOYMENT STATUS: FLSA EXEMPT AND FULL-TIME POSITION.


iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.

iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well-being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.