Advanced Security Engineer

Pearson VUE

. Conduct readiness assessments for business units entering regulated or sovereign environments; review authorization boundaries and data flows .

Posted 10/27/2026full-timeDurham • North Carolina • United StatesMid-LevelSenior💰 $80,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud and infrastructure security engineering, with a strong focus on regulatory compliance such as FedRAMP and GovRAMP. Proficient in designing secure architectures, automating control validations, and mentoring teams on secure SDLC practices.

Highest-signal resume keywords

Cloud Security EngineeringRegulatory Compliance (FedRAMP, GovRAMP)Secure SDLC PracticesVulnerability ManagementTechnical Audit Preparation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityInfrastructure SecurityScripting (Python)Technical Control DefinitionVulnerability TriageCI/CD PipelinesIdentity ManagementNetwork SegmentationLogging and SIEM IntegrationBoundary Design

Soft Skills

Excellent CommunicationMentoringTechnical OversightCollaborationProblem-Solving

Tools & Technologies

AzureGCPAWSSAST/SCA/RASP ToolingVulnerability Management ToolsAgile MethodologiesPlaybooksMonitoring PlatformsTechnical StandardsEvidence Gathering Tools

Certifications & Qualifications

CISSPCISMCCSP

Industry Keywords

FedRAMPGovRAMPNIST SP 80053ISO27001UK Cyber Essentials PlusEU GDPRNIS2China MLPSSaudi NCA ECCAustralia ASD Essential Eight

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformPythonSDLC

About the role

Key responsibilities & impact

Conduct readiness assessments for business units entering regulated or sovereign environments; review authorization boundaries and data flows
Identify architectural blockers across identity, cloud, application, logging and data controls
Validate proposed tools and services for applicable boundaries and escalate unsuitable options
Translate regulatory and contractual requirements into technical designs, standards and hardening guidance
Lead tool selection, design and onboarding for regulated environments
Define sovereign requirements for enterprise tooling and coordinate with platform owners
Design and support boundary-critical capabilities including identity, WAF, DSPM and logging/SIEM architecture
Automate manual control validation and evidence gathering
Create scripts supporting FedRAMP 20x governance and compliance measurements for Rules and KSIs
Oversee vulnerability and control health across the sovereign estate and escalate risks
Provide penetration test scope assurance and cadence support, including annual IT Health Check and ATO cycles
Lead technical audit preparation and evidence quality review; support POA&M, KEV and STIG activity
Interface with 3PAOs, external assessors and government customers on technical control questions
Review security designs and implementations; provide technical oversight, direction and advice
Mentor engineers on sovereign requirements, secure architecture and secure SDLC practices
Build reusable playbooks, standards and onboarding materials
Serve as technical entry point for business units at project intake, security kickoff and tool onboarding
Contribute to budget, licensing and vendor discussions and communicate technical risk to senior leadership

Requirements

What you’ll need

Bachelor’s degree in computer science, Information Security, MIS or an equivalent technical discipline
Significant hands-on experience in cloud and infrastructure security engineering, at a senior or lead level
Demonstrable experience operating within a regulated or accredited environment — FedRAMP, GovRAMP, NIST SP 80053, ISO27001, or a comparable national scheme
Strong practical cloud security depth in Azure, GCP and AWS, including boundary design, network segmentation, hardening and identity
Experience defining and evidencing technical controls for external audit and engaging directly with assessors
Working fluency in application security and secure SDLC — SAST/SCA/RASP tooling, vulnerability triage, and credible engagement with development teams
Experience with SIEM, logging and alerting platforms and their integration into a monitored boundary
Ability to script and automate (Python or comparable) to reduce manual control and evidence work
Excellent written and verbal communication; able to explain technical risk to nontechnical and executive audiences
Direct experience preparing for or maintaining a FedRAMP or GovRAMP authorization
Familiarity with additional sovereign regimes — UK Cyber Essentials Plus / NCSC, EU GDPR and NIS2, China MLPS/PIPL, Saudi NCA ECC, Australia ASD Essential Eight
Experience supporting government or public-sector customers under contractual security obligations
Vulnerability management and posture management tooling at enterprise scale
Experience with CI/CD pipelines and infrastructure as code in a regulated context
Professional accreditation such as CISSP, CISM, CCSP or equivalent
Prior experience mentoring engineers or leading a small technical function
Comfort operating in an agile environment with shifting priorities and multiple concurrent regulatory deadlines

Benefits

Comp & perks

Eligible to participate in an annual incentive program
Benefits information provided via employer benefits page