SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Air Space Intelligence is seeking a Security Engineer to harden and maintain mission-critical cloud and software environments for defense and intelligence applications. You will work with AWS GovCloud and Microsoft GCC High platforms, ensuring compliance with U.S. government security standards including NIST 800-171, CMMC, and NIST 800-53.
Key responsibilities include:
- Hardening and maintaining cloud and endpoint environments across government-certified platforms
- Investigating and remediating vulnerabilities, with escalation of complex issues as needed
- Leading threat modeling sessions using industry methodologies (STRIDE, PASTA)
- Automating configuration management, patching, and policy enforcement for networks, servers, and endpoints
- Monitoring security events using SIEM tools (Microsoft Sentinel, Splunk)
- Implementing container and CI/CD security practices (Kubernetes, image hardening, vulnerability scanning)
- Managing supply chain security (SBOM, artifact generation, dependency management)
- Collaborating with product, platform, and compliance teams to embed security throughout the software development lifecycle
- Supporting incident response and post-incident reviews, with growth toward leading these efforts
Required qualifications:
- Demonstrated coding skills in Python or Rust
- Hands-on experience with Infrastructure as Code (Terragrunt/Terraform)
- Practical exposure to federal security frameworks (CMMC, NIST 800-53, FedRAMP)
- Experience securing government cloud environments (AWS GovCloud)
- Familiarity with cloud-native incident alerting services (AWS GuardDuty/Security Hub, Azure Defender)
- U.S. citizenship and eligibility to obtain DoD security clearance
- Ability to work in Boston office at least three days per week
The role is backed by top-tier investors including Andreessen Horowitz, Spark Capital, and Renegade Partners, and focuses on delivering operational decision superiority for aviation, defense, energy, and critical infrastructure domains.
