Sr. Security Engineer

Atlanta, GA

Instant Apply

2 days ago

Job Description

Senior Security Engineer
Contract / Contract to Hire
Atlanta, GA

Department: Information Security – Governance, Risk & Compliance (GRC)
Job Summary
We are seeking an experienced Senior Information Security Compliance Engineer to support the organization's government compliance program, ensuring adherence to applicable domestic and international regulatory requirements and alignment with mandated cybersecurity and IT compliance frameworks.
The ideal candidate will have a strong background in IT auditing, information security, governance, risk management, and regulatory compliance.
This role will also support broader Information Security Compliance initiatives, including third-party risk assessments, audit readiness, policy and procedure development, security control assessments, and special projects driven by evolving regulatory and cybersecurity requirements.
Work Environment
A hybrid work schedule may be available following the initial onboarding phase, depending on business needs and individual performance.
The hybrid schedule is subject to modification at management's discretion, particularly during audits, assessments, or other business activities requiring additional onsite support.
Key Responsibilities:
Information Security Governance, Risk & Compliance

Support the organization's government compliance program and ensure adherence to applicable regulatory and cybersecurity requirements.
Evaluate and maintain compliance with NIST SP 800-171 and other applicable security frameworks.
Conduct IT security audits, risk assessments, vulnerability assessments, and compliance reviews.
Identify, evaluate, collect, and validate security control evidence to demonstrate compliance with regulatory and industry requirements.
Develop, implement, and maintain corporate information security policies, standards, controls, and procedures.
Research and interpret new regulatory requirements and provide clear, actionable recommendations to senior leadership.
Support third-party risk management activities, including reviewing and responding to security and compliance questionnaires.
Develop and maintain audit documentation, processes, procedures, and compliance evidence.
Collaborate with internal teams to identify compliance gaps, recommend corrective actions, and strengthen the organization's security posture.
Support special projects related to emerging cybersecurity regulations and compliance requirements.

Security Engineering & Risk Management

Design, evaluate, implement, and maintain security systems and controls to protect organizational information assets.
Perform security risk assessments, vulnerability testing, and control effectiveness evaluations.
Identify security vulnerabilities and recommend appropriate mitigation strategies and solutions.
Collaborate with technical teams to implement authentication, authorization, encryption, and access management controls.
Evaluate security solutions using industry-standard assessment criteria.
Support the implementation and maintenance of firewalls, intrusion detection systems, and other security technologies.
Monitor security controls and recommend improvements to strengthen infrastructure protection.
Assess data sensitivity and recommend appropriate security measures.
Evaluate emerging security technologies and processes to improve organizational security capabilities.

Security Incident Response & Disaster Recovery

Support investigations of security incidents, unauthorized access, and potential data breaches.
Collaborate with technical teams on incident response, forensic investigations, and data recovery activities.
Develop and maintain security monitoring and alerting procedures.
Assist in developing, testing, and implementing disaster recovery and business continuity plans.
Support security incident reporting and communication with technical teams, management, and stakeholders.
Recommend improvements to incident response procedures and security safeguards.

Audit Readiness, Documentation & Reporting

Prepare technical reports, compliance documentation, audit findings, and risk assessment summaries.
Maintain accurate documentation of security controls, policies, processes, and procedures.
Support the development and maintenance of System Security Plans (SSPs).
Coordinate with internal stakeholders to collect audit evidence and address compliance findings.
Recommend improvements to security controls, regulatory processes, and audit readiness.
Communicate compliance requirements and security risks to technical and nontechnical stakeholders.
Support security awareness initiatives, employee training, and ongoing compliance education.

Required Qualifications:

Demonstrated experience in Information Technology auditing, including identifying, evaluating, and validating control evidence to demonstrate regulatory and industry compliance.
Strong understanding of NIST SP 800-171 or comparable cybersecurity and compliance frameworks, including:
- NIST SP 800-53
- NIST Cybersecurity Framework (CSF)
- ISO/IEC 27001 and ISO/IEC 27002
- FedRAMP
- PCI DSS
- CIS Critical Security Controls
Experience applying security control concepts across different regulatory and compliance environments.
Ability to research, analyze, and interpret new regulatory requirements and communicate findings to senior leadership.
Strong written and verbal communication skills across multiple organizational levels.
Ability to work independently, manage priorities, and deliver clear, actionable results.
Strong interest in learning and applying government compliance standards.
Experience developing, reviewing, and interpreting information security policies and procedures.
Proficiency in identifying, implementing, and managing security controls.
Experience collecting, reviewing, and interpreting audit evidence and compliance artifacts.
Solid understanding of IT infrastructure, information security, network architecture, and cloud computing.
Previous experience working within a Governance, Risk & Compliance (GRC) organization or a comparable role.
Strong analytical, problem-solving, organizational, and documentation skills.

Preferred Qualifications:

Previous experience with U.S. Government IT compliance requirements.
Experience developing and maintaining System Security Plans (SSPs).
Project management experience, including coordinating initiatives across multiple functional teams.
Foundational understanding of emerging artificial intelligence (AI) tools and technologies.
Ability to evaluate AI technologies for productivity and automation improvements while identifying security risks, potential misuse, and compliance implications.
Previous experience working in the aviation industry.

Desired Certifications
One or more of the following professional certifications is highly desirable:

CISSP – Certified Information Systems Security Professional
CISA – Certified Information Systems Auditor
CRISC – Certified in Risk and Information Systems Control

“All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.”

Numbers & Facts

Location

Atlanta, GA

Skills

Access Controlunmatched
Analysis Skillsunmatched
Artificial Intelligence (AI)unmatched
Auditingunmatched
Authenticationunmatched
Automationunmatched
Aviation Industryunmatched
Business Continuity Planning (BCP)unmatched
CISA - Certified Information Systems Auditorunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Cloud Architectureunmatched
Communication Skillsunmatched
Computer Securityunmatched
Computer Skillsunmatched
Corporate Policiesunmatched
Corrective Actionunmatched
Cross-Functionalunmatched
Cryptographyunmatched
Data Analysisunmatched
Data Recoveryunmatched
Disaster Recoveryunmatched
Documentationunmatched
Emerging Technologyunmatched
Environmental Complianceunmatched
Firewallsunmatched
Government Organizationsunmatched
Government Requirementsunmatched
Government Standardsunmatched
ISO (International Organization for Standardization)unmatched
IT Requirementsunmatched
Incident Responseunmatched
Industry Standardsunmatched
Information Assetsunmatched
Information Technology & Information Systemsunmatched
Information Technology/Systems Auditunmatched
Information/Data Security (InfoSec)unmatched
International Electro-Technical Commission (IEC)unmatched
Internet Securityunmatched
Interpret Regulationsunmatched
Intrusion Detection Systemsunmatched
Leadershipunmatched
Maintain Complianceunmatched
Network Architecture/Engineeringunmatched
On Site Supportunmatched
Organizational Development/Managementunmatched
Organizational Skillsunmatched
PCI-DSSunmatched
Policy Developmentunmatched
Presentation/Verbal Skillsunmatched
Problem Solving Skillsunmatched
Procedure Developmentunmatched
Process Improvementunmatched
Productivity Managementunmatched
Project/Program Managementunmatched
Regulationsunmatched
Regulatory Complianceunmatched
Regulatory Requirementsunmatched
Reporting Skillsunmatched
Research Skillsunmatched
Riskunmatched
Risk Analysisunmatched
Risk Managementunmatched
Security Analysisunmatched
Security Auditingunmatched
Security Complianceunmatched
Security Monitoringunmatched
Systems Maintenanceunmatched
Technical Leadershipunmatched
Test Plan/Scheduleunmatched
Testingunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
Writing Skillsunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder