Senior Security Engineer

A senior security engineer at Tria Federal supporting application modernisation for federal programs and the security documentation and processes they depend on. The engineer defines security requirements and architecture, writes operating procedures for security monitoring, monitors and reports vulnerabilities and risks, configures security devices, builds tools that automate fixes, records proof-of-concept exploits, and keeps ATO paperwork such as SSPs, contingency plans and PIAs current, including during annual adaptive capabilities testing. Integrations with Splunk, AppOmni and AWS are part of it.

Tria wants experience as a systems or information security engineer, deep NIST 800-53, ATO and FedRAMP knowledge, Nessus, Burp Suite and ZAP skills, and Python, Bash or PowerShell scripting; CISSP or AWS security certifications are preferred. Public Trust eligibility is required. Remote in the US, with weekly Woodlawn office days encouraged for DMV staff.