Job Requirements
Remote
Public Trust Polygraph not specified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Security Engineer
More About the Opportunity
Take2 seeks a Security Engineer to drive national security outcomes by securing the AI and data analytics capabilities our federal oversight customer uses for investigations, audits, and inspections.
As the Security Engineer, you’ll design, implement, and maintain the security controls that protect sensitive investigative data, keep systems compliant with federal security requirements, and make secure AI and analytics possible. You’ll put role-based access controls, encryption, logging and monitoring, and data protection in place across AI applications, enterprise data platforms, and cloud infrastructure.
Your work will range from SIEM integration and protecting Law Enforcement Sensitive (LES) data to supporting the Authority to Operate (ATO) process and running security testing, all within Azure Government. You’ll help make sure new AI and data capabilities meet the highest standards of federal cybersecurity on a program of national importance.
Responsibilities include, but are not limited to:
• Design, implement, and maintain security controls across AI platforms, data environments, and mission applications, including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege access policies.
• Implement and enforce role-based access controls (RBAC), data security policies, and protections for sensitive data, including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) information, in line with customer policy.
• Connect applications, data platforms, and cloud infrastructure to customer-approved Security Information and Event Management (SIEM) and log aggregation tools to support security monitoring, alerting, and incident response.
• Monitor and analyze security logs, access patterns, and user behavior to spot unauthorized access attempts, unusual activity, data exfiltration risks, and potential security incidents.
• Support the ATO process, including control implementation documentation, security testing coordination, vulnerability assessments, remediation evidence, and ongoing compliance monitoring aligned with NIST SP 800-53 and FedRAMP.
• Perform security testing, including vulnerability assessments, penetration test coordination, secure code reviews, and configuration assessments, and confirm that pilot and production systems meet security requirements.
• Implement application-level security controls, including input validation, output encoding, authentication and authorization, session management, secure API design, and protection against the OWASP Top 10.
• Provide forensic analysis and incident response support, including server and virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical declarations for investigative or administrative matters.
• Coordinate with customer cybersecurity teams, privacy officers, DevSecOps teams, and Authorizing Officials to keep security posture integrated, compliant with enterprise policy, and aligned with continuous monitoring programs.
• Develop and maintain security documentation, including architecture diagrams, control implementation evidence, configuration standards, incident response procedures, and knowledge transfer materials.
Minimum Requirements
• U.S. citizenship.
• Current residence in the United States in either the Eastern or Central Time Zone.
• BA/BS + 7 years’ experience in cybersecurity, information security, security engineering, or a related field; equivalencies considered (13 years of experience with no degree, AA + 9 years’ experience, MA + 4 years’ experience).
• Ability to obtain DHS Entry on Duty (EOD) approval and maintain a DHS Public Trust.
• Proven experience implementing security controls, access management, encryption, and logging and monitoring for enterprise applications and cloud infrastructure.
• Strong understanding of federal security requirements, including NIST SP 800-53, FedRAMP, and FISMA, and experience supporting ATO processes and continuous monitoring programs.
• Hands-on cloud security experience in Azure (or AWS or GCP), including identity and access management (Microsoft Entra ID), network security, encryption services, and security monitoring tools.
• Demonstrated experience with SIEM platforms, log analysis, security monitoring, intrusion detection, and incident response.
Preferred Requirements
• Experience securing AI/ML applications, data analytics platforms, or sensitive data environments in federal, law enforcement, or national security settings, including investigative data handling requirements.
• Hands-on experience with Azure Government or AWS GovCloud, including implementing security controls for FedRAMP High or DoD Impact Level environments.
• Professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), or Security+.
More About the Opportunity
Take2 seeks a Security Engineer to drive national security outcomes by securing the AI and data analytics capabilities our federal oversight customer uses for investigations, audits, and inspections.
As the Security Engineer, you’ll design, implement, and maintain the security controls that protect sensitive investigative data, keep systems compliant with federal security requirements, and make secure AI and analytics possible. You’ll put role-based access controls, encryption, logging and monitoring, and data protection in place across AI applications, enterprise data platforms, and cloud infrastructure.
Your work will range from SIEM integration and protecting Law Enforcement Sensitive (LES) data to supporting the Authority to Operate (ATO) process and running security testing, all within Azure Government. You’ll help make sure new AI and data capabilities meet the highest standards of federal cybersecurity on a program of national importance.
Responsibilities include, but are not limited to:
• Design, implement, and maintain security controls across AI platforms, data environments, and mission applications, including application and infrastructure logging, access controls, audit trails, encryption, and least-privilege access policies.
• Implement and enforce role-based access controls (RBAC), data security policies, and protections for sensitive data, including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES), and For Official Use Only (FOUO) information, in line with customer policy.
• Connect applications, data platforms, and cloud infrastructure to customer-approved Security Information and Event Management (SIEM) and log aggregation tools to support security monitoring, alerting, and incident response.
• Monitor and analyze security logs, access patterns, and user behavior to spot unauthorized access attempts, unusual activity, data exfiltration risks, and potential security incidents.
• Support the ATO process, including control implementation documentation, security testing coordination, vulnerability assessments, remediation evidence, and ongoing compliance monitoring aligned with NIST SP 800-53 and FedRAMP.
• Perform security testing, including vulnerability assessments, penetration test coordination, secure code reviews, and configuration assessments, and confirm that pilot and production systems meet security requirements.
• Implement application-level security controls, including input validation, output encoding, authentication and authorization, session management, secure API design, and protection against the OWASP Top 10.
• Provide forensic analysis and incident response support, including server and virtual machine reconstruction, security-focused data analysis, digital evidence preservation, and technical declarations for investigative or administrative matters.
• Coordinate with customer cybersecurity teams, privacy officers, DevSecOps teams, and Authorizing Officials to keep security posture integrated, compliant with enterprise policy, and aligned with continuous monitoring programs.
• Develop and maintain security documentation, including architecture diagrams, control implementation evidence, configuration standards, incident response procedures, and knowledge transfer materials.
Minimum Requirements
• U.S. citizenship.
• Current residence in the United States in either the Eastern or Central Time Zone.
• BA/BS + 7 years’ experience in cybersecurity, information security, security engineering, or a related field; equivalencies considered (13 years of experience with no degree, AA + 9 years’ experience, MA + 4 years’ experience).
• Ability to obtain DHS Entry on Duty (EOD) approval and maintain a DHS Public Trust.
• Proven experience implementing security controls, access management, encryption, and logging and monitoring for enterprise applications and cloud infrastructure.
• Strong understanding of federal security requirements, including NIST SP 800-53, FedRAMP, and FISMA, and experience supporting ATO processes and continuous monitoring programs.
• Hands-on cloud security experience in Azure (or AWS or GCP), including identity and access management (Microsoft Entra ID), network security, encryption services, and security monitoring tools.
• Demonstrated experience with SIEM platforms, log analysis, security monitoring, intrusion detection, and incident response.
Preferred Requirements
• Experience securing AI/ML applications, data analytics platforms, or sensitive data environments in federal, law enforcement, or national security settings, including investigative data handling requirements.
• Hands-on experience with Azure Government or AWS GovCloud, including implementing security controls for FedRAMP High or DoD Impact Level environments.
• Professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), or Security+.
group id: 90860665
