Senior Security Engineer
Citian · Washington, D.C.
About this role
**Citian — Senior Security Engineer** Citian is a fast-growing, venture-backed SaaS technology company based in Washington, DC. Our software solutions revolutionize how transportation and infrastructure systems (roads, rail, transit, bicycle, pedestrian) operate—helping reduce traffic fatalities, enhance pedestrian accessibility, and empower system operators to save time and money. You’ll work with engineers and data scientists applying emerging technologies, including Artificial Intelligence and Machine Learning, to build smarter tools for a diverse client base across the United States. --- ## Who You Are You’re a hands-on security engineer who has secured production cloud systems against regulatory or contract requirements. You understand what assessors will ask for, set standards, write infrastructure code, review changes, and help teams fix problems (not just provide a checklist). You can clearly explain risk and trade-offs to engineers, executives, and customer security teams. --- ## Expected Duties - Lead security and compliance across products (crash analytics, asset management, and crash data intake for state agencies). Set requirements, build controls, track fixes, and prepare for audits/assessments. - Secure the crash data intake product in **AWS GovCloud** handling criminal justice information—repeatable for each new state. Includes: identity & MFA, encryption & key management (including **FIPS** where required), network isolation, logging & alerts, backup & recovery, retention & deletion, and controls on what data can leave. - Set and enforce access controls for regulated customer data, including contract limits on access outside the US and via third-party tools. - Translate customer contracts and security frameworks (e.g., **SOC 2**, **CJIS**) into specific controls with an owner, checks (automated where possible), and current evidence. Support independent assessments (e.g., **NIST SP 800-53 Moderate**). - Serve as the technical contact for customer security/compliance teams (questionnaires, architecture reviews, audits). - Find and rank vulnerabilities across infrastructure, code, and dependencies. Prioritize fixes with system owners, confirm remediation, and track exceptions. - Set up security monitoring and incident response; practice with the engineering on-call team. - Write security standards for engineers and AI coding agents; build checks into development and deployment. - Decide when to engage outside help (assessors, penetration testers, managed services) and lead those efforts. --- ## Required Skills & Experience - Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). - **6+ years** in security, platform, or infrastructure engineering with a strong security focus in **AWS**. - Secured production systems against defined requirements, including building controls, maintaining evidence, and supporting independent assessments. - Infrastructure as code (e.g., **AWS CDK** or **Terraform**) and core AWS security (IAM, KMS, networking, logging). - Application and data security, including separation of customer data and authorization; working knowledge of **TypeScript/JavaScript/Python**. - Investigated and responded to production security incidents. - Worked directly with customer security or compliance teams. - Uses AI coding tools daily, verifies output, and keeps sensitive data out of unapproved AI services. --- ## Preferred Qualifications - **CJIS**, **AWS
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.