Senior Security Engineer ( Only Locals to Texas )

Role: Senior Security Engineer

Work location: Austin, TX

Duration: 6 Months

In Person Interview at Austin, Texas

Responsibilities:

• Lead end to end System Security & Privacy Plan (SSP/SSPP) development, maintenance, and updates for enterprise systems
• Drive remediation activities through POA&M management, ensuring timely closure of compliance gaps
• Translate penetration testing and vulnerability findings into actionable remediation work items (EPICs/user stories)
• Coordinate with application, infrastructure, and security teams to validate remediation through re-testing and evidence
• Oversee risk-based vulnerability management, including prioritization and SLA-driven remediation
• Provide governance oversight for endpoint protection, web application security, and cloud security controls
• Produce assessor ready documentation, including configurations, monitoring evidence, approvals, and incident traceability
• Support continuous audit readiness and reduce repeat findings through disciplined governance and documentation practices

Qualifications:

Required Qualifications:

• 12 years of experience with deep focus on Governance, Risk, and Compliance (GRC), Enterprise Security, and Security Architecture, including vulnerability management and penetration testing in cloud and hybrid environments
• 10 years of experience owning System Security Plan (SSP) development end-to-end, from initial scoping through authorization and ongoing maintenance
• 10 years of hands-on experience working with CMS MARS-E v2.2 or comparable federal or state security frameworks
• 10 years of experience in Control implementation documentation, Audit evidence collection, validation, and response, POA&M creation, tracking, and remediation management
• 8 years of experience translating technical security issues into compliance-aligned remediation actions
• 8 years of experience managing stakeholders across security, infrastructure, and application teams
• 8 years of experience demonstrating strong written and verbal communication skills, including engagement with executive-level stakeholders
• 8 years of experience applying NIST 800-53, NIST Risk Management Framework (RMF), and privacy controls
• 8 years of experience supporting Secure SDLC and DevSecOps practices

Preferred Qualifications:

• 5 years of experience operating in multi-vendor, multi-platform environments
• 5 years of experience driving reductions in repeat audit findings and improving overall compliance maturity
• 5 years of experience mentoring or guiding teams on security governance best practices
• 1 year of experience supporting client systems, including SSP development and compliance activities