Jobs in the United States

25+ jobs

Save this search

Added 4 mins ago
Principal Engineer, Identity & Access Management (IAM)
Boston Scientific
Arden Hills, MN
Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls and Zero Trust principles.
Added 10 mins ago
Senior Security Research Engineer
Referral Board
United States
Reverse engineer malware and study evasion. Learn how attackers bypass endpoint security controls in the wild, and feed that understanding directly into the protections you design and…
Added 19 mins ago
Principal/Sr. Principal FPGA Engineer
CORP-Corporate Office
United States
…targeting systems that provide situational awareness, self-protection, and offensive electronic attack capability to platforms across the spectrum from visible light IR to millimeter wave…
Added 19 mins ago
FPGA Engineer
CORP-Corporate Office
United States
…targeting systems that provide situational awareness, self-protection, and offensive electronic attack capability to platforms across the spectrum from visible light IR to millimeter wave…
Added 27 mins ago
D&
Administrator, Network Security 1, HWAD
Day & Zimmermann
Hawthorne, NV
- $34.41 USD / hour
Engineer, Systems Administrator, and Army enterprise support organizations. Government managed enterprise security equipment and controls may be accessed or modified only when
Added 29 mins ago
Plant Engineer
Michigan Turkey Producers
Wyoming, MI
Under the supervision of the Vice President of Maintenance, Facilities and Engineering, the Plant Engineer provides engineering leadership for equipment, utilities, facility systems, and…
Added 34 mins ago
Senior Systems Security Engineer (SSE)
Integration Innovation, Inc. (i3)
Huntsville, AL
We are seeking a highly experienced and technically authoritative Senior, Systems Security Engineer (SSE) to lead the integration of Supply Chain Risk Management (SCRM) and program…
Added 36 mins ago
TH
IT Systems Engineer - Secret clearance needed
Tlingit Haida Tribal Business Corporation
Washington, DC
- $97,000 to $107,000 USD / year
Partner with cybersecurity and facility teams to ensure physical and logical boundary protection controls meet Defense Information Systems Agency (DISA) audit readiness.
Added 38 mins ago
Senior Security Research Engineer
Elastic
United States
Reverse engineer malware and study evasion. Learn how attackers bypass endpoint security controls in the wild, and feed that understanding directly into the protections you design and…
Added 41 mins ago
Data Center Design Engineer
Cloudflare
Austin, TX
We are seeking a Data Center Design Engineer to design Cloudflare’s pending and future infrastructure deployments for generational improvement in cost, quality, and speed of deployment. In…
Added 42 mins ago
AI-Native Security Engineer - Senior
EY
Akron, OH · Albany, NY · Alpharetta, GA · Arlington, VA · Austin, TX · Baltimore, MD · Baton Rouge, LA · Birmingham, AL · Boca Raton, FL · Boston, MA · Buffalo, NY · Chantilly, VA · Charleston, WV · Chattanooga, TN · Chicago, IL · Cincinnati, OH · Cleveland, OH · Dallas, TX · Denver, CO · Des Moines, IA · Detroit, MI · Pittsburgh, PA · Fort Worth, TX · Grand Rapids, MI · Grandview Heights, OH · Greenville, SC · Hartford, CT · Hoboken, NJ · Houston, TX · Huntsville, AL · Indianapolis, IN · Irvine, CA · Jacksonville, FL · Kansas City, MO · Las Vegas, NV · Los Angeles, CA · Louisville, KY · McLean, VA · Memphis, TN · Iselin, NJ · Miami, FL · Milwaukee, WI · Minneapolis, MN · Nashville, TN · New Brunswick, NJ · New Orleans, LA · Jericho, NY · New York, NY · Charlotte, NC · Oklahoma City, OK · Orlando, FL · Palo Alto, CA · Philadelphia, PA · Phoenix, AZ · Portland, OR · Providence, RI · Raleigh, NC · Richmond, VA · Rochester, NY · Rogers, AR · Sacramento, CA · Salt Lake City, UT · San Antonio, TX · San Diego, CA · San Francisco, CA · San Jose, CA · San Mateo, CA · Seattle, WA · Secaucus, NJ · St. Louis, MO · Stamford, CT · Tallahassee, FL · Tampa, FL · Southfield, MI · Toledo, OH · Tucson, AZ · Tulsa, OK · Washington, DC · Westlake Village, CA · Wichita, KS · Atlanta, GA
Build runtime protection. Use end-to-end evidence and behavioral signals to detect abnormal actions, privilege misuse, attempted exfiltration, and degrading controls.
Added 49 mins ago
SI
Critical Facility Engineer III (Shift Lead)
Salute Inc.
Dallas, TX · Royse City, TX
- $46 to $51 USD / hour
…we are seeking a dynamic and experienced Critical Facility Engineer III to join our team and drive our relationships with hyperscale clients to new…
Added 56 mins ago
PD
Senior DevSecOps Engineer
Pantheon Data
Reston, VA
- $145,000 to $200,000 USD / year
…Amazon EKS delivery through GitOps, enforcing gated security controls that satisfy NIST 800-53, FedRAMP, and DoD SRG requirements while keeping delivery fast. You will partner closely with…
Added 1 hour ago
Senior Cloud Security Engineer
The Guardian Life Insurance Company of America
NY
…senior technical contributor across Cloud-Native Application Protection (CNAPP), Cloud Security Posture Management (CSPM), AWS-native identity security controls and services, Public Key…
Added 1 hour ago
Microsoft Information Protection (MIP) Engineer
Govcio LLC
United States
The Microsoft Information Protection (MIP) Engineer will support enterprise data protection initiatives focused on Data Loss Prevention (DLP), Microsoft Purview Information Protection,…
Added 1 hour ago
Electrical Engineer; Maitland, FL
Career Collective
Maitland, FL
Electrical Design Engineer - We are seeking an Electrical Design Engineer with 2+ years of experience in electrical building systems design to support a variety of commercial and…
Added 1 hour ago
WI
(USA) Distinguished, Systems and Infrastructure Engineer, Information Security
Walmart Inc.
United States
- $130,000 to $260,000 USD / year
As a Distinguished Systems and Infrastructure Engineer in Information Security, you will lead the design and implementation of scalable, secure infrastructure solutions across complex…
Added 1 hour ago
Security Engineer
Relativity ODA LLC
IL
The Security Engineer is a security practitioner responsible for implementing, operating, and continuously improving enterprise security capabilities across endpoint, network, identity,…
Added 1 hour ago
Manufacturing Engineer II
PGT Industries
Nokomis, FL
The Manufacturing Engineer II has seasoned understanding and knowledge of engineering concepts, practices and procedures and can apply them accordingly. This role requires the ability to…
Added 1 hour ago
Lead I&C / DCS Engineer
Flexible, TX
Lead, develop, and prioritize the work of the Lead SCADA and Automation Engineer, Process Controls Engineer, Instrumentation Engineer, HV SCADA and Protection Engineer, and Power Generation…
Added 1 hour ago
Senior Security Architect - TS/SCI
Sunayu
Bethesda, MD
…security architectures, including image security, admission controls, secrets, identity, network policies, software supply chain security, security scanning, and runtime…
Added 1 hour ago
Software Architect/Principal Engineer
DCS Corporation
Sterling Heights, MI, MI
…engineers. This position supports the Product Manager Vehicle Protection Systems (PdM VPS) integration of Active Protection Systems (APS) onto Capability Program Executive (CPE) Ground…
Added 1 hour ago
Embedded Controls Engineer, Airborne Electronic Hardware
BETA Technologies
Raleigh, NC
The Embedded Controls Engineer - AEH will work as part of a multidisciplinary team developing products for use in BETA’s electric aircraft and customer platforms. As a Embedded Controls…
Added 1 hour ago
J
Principal Systems Engineer
Jobot
Gaithersburg, MD
- $140,000 to $175,000 USD / year
Added 1 hour ago
NN
Automation Engineer
Nicolet National Bank
Twin Cities, MN
- $80,000 to $100,000 USD / year
The Automation Engineer is responsible for designing, developing, deploying, and supporting scalable automation solutions that improve operational efficiency, reduce manual effort,…

Pantheon Data

Senior Cloud Security Engineer

Reston, VA, United States

$130,000 to $200,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $130,000 to $200,000 USD / year
Experience: 7+ years of hands-on experience in security engineering, cloud engineering, or a closely related role, including 3+ years securing production AWS environments.
Posting language: English
Posted: Nov 2, 2026

Original job description

Company Overview

Pantheon Data (a Kenific Holding company) is a private, small business based in the Washington, DC, area. Pantheon Data was founded in 2011, initially providing acquisition and supply chain management services to the US Coast Guard. Our service offerings have grown in the past ten years, including infrastructure resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and cybersecurity. We have also grown our customer base to include commercial clients. The company has used this experience to expand our service offerings to other agencies within the Department of Homeland Security (DHS), the Department of Defense (DoD), and other Federal Civilian Agencies.

Position Overview

Pantheon Data is seeking a Senior Cloud Security Engineer to own the security architecture, controls, and continuous monitoring of our AWS GovCloud environments, which host ML-enabled workloads and applications that process CUI, PII, and PHI. You will design and implement the guardrails that keep these environments secure and compliant: identity and access, encryption, network security, threat detection, vulnerability management, and the evidence that supports ATO and continuous monitoring under FedRAMP High and DoD IL4/IL5.

This role owns the security of the cloud platform at runtime. You will partner closely with the DevSecOps Engineer, who owns CI/CD pipeline security and the software supply chain, and the Cloud Operations Engineer, who builds and runs the infrastructure: you set the security standards and controls those teams implement, and you verify that they hold in production. This is a hands-on engineering role, not a policy-writing or audit-only role. Successful candidates can walk through production cloud security controls they have personally designed and implemented, how they detected and responded to real findings, and the compliance evidence their work produced.

Responsibilities

Identity and Access Management: Design and enforce least-privilege access across a multi-account AWS organization using IAM Identity Center, role-based access, permission boundaries, and service control policies; run periodic access reviews and eliminate long-lived credentials.
Security Guardrails: Define and maintain preventive and detective guardrails as code, including service control policies, AWS Config rules and conformance packs, and organization-wide CloudTrail, so new accounts and workloads are secure by default.
Threat Detection and Response: Operate and tune AWS security services (GuardDuty, Security Hub, Inspector, Macie, Detective) and integrate their findings and logs with the organization's SIEM; lead investigation and containment of cloud security incidents and maintain incident response runbooks.
Data Protection: Own the encryption and key management strategy (AWS KMS key policies, rotation, FIPS 140-validated endpoints) and the data perimeter controls protecting CUI, PII, and PHI across storage, databases, and Amazon Bedrock access paths.
Network Security: Define security group standards, network segmentation, AWS Network Firewall and WAF policies, and restricted-egress boundaries, and partner with Cloud Operations to implement them.
Vulnerability and Configuration Compliance: Run continuous vulnerability and configuration scanning across hosts, containers, and cloud resources against DISA STIGs and CIS benchmarks; prioritize findings and track remediation to closure with Cloud Operations and owning teams.
Compliance and ATO Support: Map technical controls to NIST SP 800-53; write and maintain control implementation statements; produce continuous monitoring evidence; track POA&M items to remediation; and support assessors during ATO and annual assessment activities.
Security Enablement: Review architectures and infrastructure-as-code changes for security, publish secure baseline patterns, and mentor engineers on cloud security practices.

Required Skills and Experience

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related technical field from an accredited university, or equivalent professional experience.
7+ years of hands-on experience in security engineering, cloud engineering, or a closely related role, including 3+ years securing production AWS environments.
Deep, hands-on experience with AWS identity and access controls: IAM policy design and troubleshooting, cross-account roles, federated SSO or IAM Identity Center, and organization-level guardrails such as service control policies.
Experience operating cloud threat detection and security posture tooling, AWS-native or comparable, and turning findings into prioritized, tracked remediation.
Experience implementing encryption, key management, and network security controls in cloud environments.
Working understanding of security compliance frameworks and how they translate into technical controls, monitoring, and audit evidence.
Proficiency with infrastructure as code (Terraform preferred) sufficient to write, review, and enforce security controls as code.
Scripting proficiency in Python or Bash for security automation.
Current security certification such as CompTIA Security+, CISSP, or AWS Certified Security – Specialty.
Clear written communication, including documenting controls, findings, and remediation guidance for engineers and assessors.
Ability to work effectively remotely in cross-functional teams.
Ability to meet deadlines and produce quality work.
Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint.

Preferred Skills and Experience

Direct experience supporting FedRAMP High or DoD IL4/IL5 ATO efforts: control implementation statements, SSP contributions, POA&M management, continuous monitoring, and assessor engagement.
Practical experience applying NIST SP 800-53, DoD RMF, and the DoD Cloud Computing SRG in AWS GovCloud, including DISA STIG and CIS benchmark compliance.
Certification that satisfies DoD 8140 requirements for privileged cybersecurity roles.
Experience with SIEM and log analytics platforms such as Splunk, Elastic/OpenSearch, or Amazon Security Lake, including building detections from CloudTrail, VPC Flow Logs, and application logs.
Container and Kubernetes security experience: Amazon EKS hardening, pod security standards, image scanning, and runtime protection.
Experience securing AI/ML workloads, including Amazon Bedrock access controls, data perimeter design for model inputs and outputs, and data exfiltration risks.
Policy-as-code experience with tools such as OPA, Cloud Custodian, or custom AWS Config rules.
Experience building automated security response, such as EventBridge- and Lambda-driven remediation.

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements. Candidates must have the ability to obtain and maintain a Secret clearance; an active Secret clearance is preferred.

Work Location: Reston, VA - Remote

Our company prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
If the position is remote or hybrid, you may periodically work from a Pantheon Data office location or client site.
If this position is assigned to a Pantheon Data office location or client site, you'll work with colleagues and clients in person, as needed for specific client requirements.

Interview Requirement: Candidates who are local to the area should be prepared to participate in an in-person interview as part of the selection process. Candidates outside the local area may be considered for a virtual interview.

Compensation

The salary range for this position is $130,000 - $200,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Benefits Overview

We are always looking for good people! Pantheon Data is committed to providing its employees with competitive salaries and benefits in order to increase employee satisfaction and productivity. In addition to our benefits, we also offer SmartBenefits through the Washington Metro Area Transportation Authority, where you specify an amount of your pre-tax wages be paid directly to your SmarTrip account. In some cases, tuition assistance may be available for continuing education expenses and certifications related to their position. Additional details may be found at https://pantheon-data.com/careers/

Pantheon Data Important Information

All qualified applicants will be considered for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our Talent Team at Recruiting@pantheon-data.com or by phone (571) 363-4020.

This company uses E-Verify to confirm each employee's work authorization. For more information, click here E-Verify Participation Poster

Apply About employer

More about this job

Skills

AWS
ML
CI/CD
Supply chain management
Security regulations
Regulatory compliance
Identity and access management
Incident response
Data protection
Infrastructure as code
Computer science
Cybersecurity
Troubleshooting
IBM Terraform
Python
Bash
Security+
CISSP
AWS certification
Communication skills
Meet deadlines
Microsoft Outlook
Microsoft Word
Microsoft Excel
Microsoft SharePoint
Microsoft PowerPoint
SSP
Cloud computing
Splunk
Kubernetes
Liaise with colleagues

Report this job