CGI
Posted 1mo ago

Lead Security Engineer

CGI
Fairfax or Lafayette
$128k-$276k/yrHybridFull Time
Responsibilities
  • designing architecture
  • implementing controls
  • leading engineering
Requirements
  • Bachelor's in cybersecurity/IT,9+ years experience,experience with automation and cloud security tooling,Zero Trust and NIST SP 800 207 knowledge,CISSP or Security+ desired,experience with secure engineering for AI
Technical tools mentioned
NIST SP 800 207

Job description

Position Description:

The Lead Security Engineer is the enterprise technical authority for advanced cybersecurity engineering, Zero Trust architecture design, and security modernization efforts across Treasury's hybrid cloud ecosystem. This role leads transformative engineering initiatives to implement secure architectures, automate security controls, and strengthen Treasury's cyber resilience.
This position is located in our Fairfax, VA or Lafayette, LA office; however, a hybrid working model is acceptable.






Your future duties and responsibilities:

Design, deploy, and optimize security architectures supporting cloud, hybrid, and on premise environments.
Implement secure configurations, baselines, and automated security controls.
Lead engineering support for identity management, authentication, and access control modernization.
Implement DevSecOps security enhancements and secure integration pipelines.
Support application hardening, vulnerability remediation, and secure API integrations.
Implement emerging protections including those for AI enabled applications and services.







Required qualifications to be successful in this role:

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field.
9+ years relevant experience.
Experience with automation tools, cloud security tooling, and Zero Trust patterns.
Knowledge of NIST SP 800 207
Desired qualifications/non essential skills required:
CISSP or Security+ certification.
Experience with secure engineering for AI or modern application stacks.
CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $127,500.00 $276,200.00.
CGI Federal's benefits are offered to eligible professionals on their first day of employment to include:  
.    Competitive compensation
.    Comprehensive insurance options
.    Matching contributions through the 401(k) plan and the share purchase plan
.    Paid time off for vacation, holidays, and sick time
.    Paid parental leave
.    Learning opportunities and tuition assistance
.    Wellness and Well being programs
#CGIFederalJob
#LI RT1
 
 















Skills:

  • Enterprise risk management
  • Identity and access mgt (IAM)
  • Cloud architecture
  • DevOps
  • Integration architecture
  • Security Certification






What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.

Qualified applicants will receive consideration for employment without regard to their race, ethnicity, ancestry, color, sex, religion, creed, age, national origin, citizenship status, disability, pregnancy, medical condition, military and veteran status, marital status, sexual orientation or perceived sexual orientation, gender, gender identity, and gender expression, familial status or responsibilities, reproductive health decisions, political affiliation, genetic information, height, weight, or any other legally protected status or characteristics to the extent required by applicable federal, state, and/or local laws where we do business.

CGI provides reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to apply for a job in the U.S., please email the CGI U.S. Employment Compliance mailbox at [email protected]. You will need to reference the Position ID of the position in which you are interested. Your message will be routed to the appropriate recruiter who will assist you. Please note, this email address is only to be used for those individuals who need an accommodation to apply for a job. Emails for any other reason or those that do not include a Position ID will not be returned.

We make it easy to translate military experience and skills! Click here to be directed to our site that is dedicated to veterans and transitioning service members.

All CGI offers of employment in the U.S. are contingent upon the ability to successfully complete a background investigation. Background investigation components can vary dependent upon specific assignment and/or level of US government security clearance held. Dependent upon role and/or federal government security clearance requirements, and in accordance with applicable laws, some background investigations may include a credit check. CGI will consider for employment qualified applicants with arrests and conviction records in accordance with all local regulations and ordinances.

CGI will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with CGI’s legal duty to furnish information.

About CGI

Provides information technology and business consulting services.

Similar jobs

Security Engineer roles near Fairfax, Virginia
4h
Save
Mark Applied
Hide
Senior Security Engineer - Splunk
National Harbor or Washington
$140k-$155k/yr HybridFull Time
UltraViolet Cyber
UltraViolet Cyber: Provider of unified offensive and defensive managed cybersecurity services.
7+ YOEBachelor's degree, 7+ years of security engineering experience, 3+ years of advanced Splunk implementation, Splunk certification, federal security controls expertise, and U.S. citizenship required.
Splunk, Splunk Enterprise Security, Cribl, SPL, FISMA, RMF, NIST SP 800-53, CISA, CDM
19h
Save
Mark Applied
Hide
Senior Engineer
Washington, District of Columbia, United States
$115k-$140k/yr OnsiteFull Time
The Atlantic
The Atlantic: Publishes a magazine and digital journalism on politics and culture.
5+ YOERequires 5+ years of software engineering experience with security engineering, backend programming, DevOps, secure software design, IAM, WAFs, data access controls, and security incident ownership.
CI/CD, AWS, GCP, Azure, Terraform, Datadog, Sentry, IAM, WAFs, LLM
1d
Save
Mark Applied
Hide
Staff Security Engineer
Tysons, Virginia, United States
$168k-$181k/yr HybridFull Time
Alarm.com
Alarm.comNasdaq: ALRM: Provides cloud-based smart home security and automation solutions.
10+ YOE10+ years of information security experience focused on offensive security, penetration testing, or vulnerability research; IoT, embedded systems, firmware, reverse engineering, and security testing expertise required. Degree preferred.
oscilloscopes, logic analyzer, UART, I2C, SPI, JTAG, IDA Pro, Ghidra, Binary Ninja, ARM, x86, RISC-V, Linux
1d
Save
Mark Applied
Hide
Security Engineer, AWS AppSec
Herndon or Seattle
$136k-$184k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
Bachelor's degree in engineering, computer science, or related field; security engineering experience; web security knowledge; coding or scripting ability; and experience with application security, testing, or incident response.
AWS, Java, C++, Python
2d
Save
Mark Applied
Hide
Sovereign Cloud Security Engineer Expert
Reston, Virginia, United States
$176k-$374k/yr HybridFull Time
SAP
SAPFrankfurt Stock Exchange: SAP: Sells enterprise resource planning and business management software solutions.
7+ YOEBachelor's or master's degree in computer science, information technology, engineering, or equivalent experience; 7+ years software development; cloud security, infrastructure, Terraform, Ansible, CI/CD, Git, Kubernetes, AWS, and Azure experience.
Terraform, Ansible, CI/CD, GIT, Kubernetes, AWS, Azure, GCP, NIST, ISO, Open Source, ERP
3d
Save
Mark Applied
Hide
Senior Security Engineer, National Security
Maryland or Fort Meade
$174k-$252k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's degree or equivalent, 5 years in security engineering and assessments, 5 years of coding, active Top Secret/SCI clearance with current polygraph, and US citizenship.
Mandiant, Continuous Integration (CI), Continuous Deployment (CD), Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Software Development Life Cycle (SDLC), LLMs
3d
Save
Mark Applied
Hide
Security Engineer 
Bethesda, Maryland, United States
$100k-$120k/yr OnsiteFull Time
Chickasaw Nation Industries
Chickasaw Nation Industries: Provides federal contracting, engineering, and technology services.
4+ YOEBachelor's degree and 4+ years supporting enterprise endpoint management. Requires Public Trust eligibility, cybersecurity and endpoint security expertise, Intune, MECM, security baselines, Defender, PowerShell, and federal cybersecurity knowledge.
Microsoft Intune, Microsoft Endpoint Configuration Manager, MECM, Jamf Pro, CIS, Microsoft Security Baselines, Microsoft Defender for Endpoint, BitLocker, Windows Firewall, PowerShell, Entra ID, Conditional Access, RBAC, NIST 800-53, Zero Trust Architecture, Azure Virtual Desktop, Microsoft Intune Administrator Associate, Microsoft Security Administrator, Autopilot, Active Directory Group Policy, FileVault, Credential Guard, Application Control
1w
Save
Mark Applied
Hide
Senior Security Engineer
Rockville or Washington or Tysons or Colorado or Florida or Texas or Illinois or Pennsylvania or Massachusetts or New York or New Jersey
HybridFull Time
FINRA
FINRA: Regulates brokerage firms and exchange markets in the United States.
10+ YOE5+ MgmtBachelor's degree and 10 years in securities or financial services, 5 years of supervision, project management, regulatory knowledge, analytics platforms, and excellent communication skills.
Cribl Stream, Splunk, AWS, Azure, GCP, SQS, SNS, Amazon S3, Azure Event Hubs, GCP Pub/Sub, Splunk Edge Processor, SPL2, Python, Appgate SDP, Terraform, Ansible, CI/CD, Kubernetes, Power BI, Dataiku