Principal Security Engineer

Valiant Solutions

. Provide technical expertise on security control implementations and develop information security procedures for systems and applications .

Posted 9/18/2026full-timeRemote • United StatesLead💰 $140,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security control implementations and compliance with NIST and FedRAMP standards, alongside strong analytical skills for assessing vendor systems and architectures. Capable of leading security reviews and providing technical guidance to stakeholders while ensuring adherence to security policies and procedures.

Highest-signal resume keywords

FedRAMP ComplianceNIST Security StandardsSecurity EngineeringSystem ArchitectureSecurity Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Control ImplementationTechnical Compliance AssessmentArchitecture ReviewVulnerability ScanningPenetration TestingRisk AssessmentContinuous MonitoringDocumentation ReviewIncident AnalysisGovernance and Security Planning

Soft Skills

Strong Communication SkillsStakeholder EngagementLeadership in MeetingsAnalytical ThinkingAttention to Detail

Certifications & Qualifications

Security+CISSPCISMCISA

Industry Keywords

Cloud Service Provider (CSP)FISMA ComplianceRisk Management Framework (RMF)General Security Best PracticesAgency Standards

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Provide technical expertise on security control implementations and develop information security procedures for systems and applications
Perform pre-assessment activities, including detailed analysis of technology stacks comprising vendor solutions
Assess vendor systems for technical compliance with NIST, FedRAMP, and agency standards
Perform detailed architecture and technical design reviews across the full stack for vendor solutions
Conduct architecture reviews of CSP authorization packages to validate secure design, FedRAMP and agency alignment, identify gaps, and advise on risk posture and compliance
Lead and conduct architecture interviews with CSPs
Develop architecture briefing documents for the Government FedRAMP program manager and CISO
Review and comment on CSP FedRAMP documentation, including system security plans, policies, procedures, agency guidance, alternative implementation, and risk acceptance documents
Work with CSPs to reconcile documentation and technology gaps
Review CSP assessments and package submissions after 3PAO audits and prepare package briefings
Review vendor security assessment plans, security assessment reports, vulnerability scans, and penetration tests
Provide security engineering services alongside the agency FedRAMP Lead
Support Continuous Monitoring activities, including annual package submissions, significant change proposals, and risk acceptance documents
Interpret FedRAMP and agency requirements and provide vendors with guidance
Monitor updated FedRAMP guidance, industry best practices, emerging technologies, and Government cybersecurity directives
Provide recommendations regarding impacts of updated guidance and technologies
Conduct security reviews of technologies for use within CSP authorization boundaries
Manage relationships for assigned contractor-owned or contractor-operated systems and ensure compliance with agency security and privacy requirements
Assist stakeholders with IT security activities to meet project deadlines
Ensure systems are operated, maintained, and disposed of in accordance with documented security policies and procedures, including Assessment & Authorization (A&A)
Research assigned IT security systems and provide architecture and security recommendations

Requirements

What you’ll need

Five (5) years of experience in the IT Security field
Bachelor’s degree in Computer Science, Information Systems, Mathematics, Engineering or a related field, OR an additional three years of IT experience required
Direct experience as a Security Engineer or System Architect performing analysis on FedRAMP Cloud Service Providers (CSP) architectures and control implementations
Four (4) years of hands-on technical experience as a System Architect or Security Engineer
Four (4) years of experience supporting FedRAMP as an Engineer or Architect
Security+, CISSP, CISM, CISA, or equivalent Security certification
Confidence and depth of understanding to lead meetings with potential Vendors
Current experience in reviewing 3rd party security assessment reports
Detailed knowledge and experience with NIST Policies, Governance, Security Planning and Architecture, FISMA Compliance, RMF, Incident Analysis, and General Security Best Practices
Strong written and oral communication skills
Ability to communicate with technical and non-technical stakeholders
Strong communication skills to interact with senior managers, junior staff, and business unit customers
Must maintain a quiet and distraction-free workspace with adequate internet
Must dedicate full attention and availability to job duties during working hours
Must maintain a schedule during core business hours aligned with coworkers and clients
Must disclose current or future outside employment engagements and obtain written approval
Must not solicit or conduct outside business during Valiant/client core business hours

Benefits

Comp & perks

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Families and Dependents
100% Paid Short-Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Valiant University – Online Education and Training Portal
Wellness & Fitness Program
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses
Work-life balance
Career development opportunities
Quiet and distraction-free workspace support for remote work
Flexible remote work arrangement