Hireblazer
Hire the best of the best technology Staff

Jobs

SECURITY ENGINEER 3, AUSTIN, TX (HYBRID)

Apply Now

Contract: 6 Months (3 Yrs Ext)

Deadline: 2/24/26

Job Description:

The Security Engineer will project work by leading security governance, compliance, and risk management activities, with a strong focus on System Security & Privacy Plans (SSP/SSPP). This role bridges technical security operations and regulatory compliance, ensuring audit readiness, effective vulnerability remediation, and secure delivery of public-facing services across complex, multi-platform environments.

  • Lead end to end System Security & Privacy Plan (SSP/SSPP) development, maintenance, and updates for enterprise systems

  • Drive remediation activities through POA&M management, ensuring timely closure of compliance gaps

  • Translate penetration testing and vulnerability findings into actionable remediation work items (EPICs/user stories)

  • Coordinate with application, infrastructure, and security teams to validate remediation through re-testing and evidence

  • Oversee risk-based vulnerability management, including prioritization and SLA-driven remediation

  • Provide governance oversight for endpoint protection, web application security, and cloud security controls

  • Produce assessor ready documentation, including configurations, monitoring evidence, approvals, and incident traceability

  • Support continuous audit readiness and reduce repeat findings through disciplined governance and documentation practices

Required Skills:

  • 12 Yrs of deep focus on: Governance, Risk, and Compliance (GRC), Enterprise Security and Security Architecture, Vulnerability Management and Penetration Testing , Cloud Security and hybrid environments

  • 10 Yrs of Proven experience owning SSP development end to end

  • 10 Yrs of Hands on experience with CMS MARS E v2.2 or comparable federal/state security frameworks

  • 10 Yrs of Strong expertise in: Control implementation documentation, Audit evidence collection and validation, POA&M creation, tracking, and remediation management

  • 8 Yrs of Ability to translate technical security issues into compliance aligned remediation actions

  • 8 Yrs of Strong stakeholder management skills across security, infrastructure, and application teams

  • 8 Yrs of Excellent written and verbal communication skills, particularly for executive stakeholders

  • 8 Yrs of Knowledge of NIST 800 53, NIST RMF, and privacy controls

  • 8 Yrs of Knowledge of Secure SDLC and DevSecOps practices

Preferred Skills:

  • 5 Yrs of Experience operating in multi-vendor, multi-platform environments

  • 5 Yrs of Demonstrated ability to reduce repeat audit findings and improve compliance maturity

  • 5 Yrs of Experience mentoring or guiding teams on security governance best practices

  • 1 Yr of Experience supporting Client systems, including SSP development and compliance

Kavitha K