Security Engineer

About

ASG is seeking a Security Engineer to support SAMHSA system security engineering, architecture review, vulnerability remediation, and secure development activities. This role works with developers, system engineers, project managers, and internal clients to identify required protections during development and maintain alignment with HHS and SAMHSA security requirements.

What You Will Do

• Work with development and engineering teams to identify security requirements and required protections during the system development process.
• Review system designs, technical changes, configurations, and vulnerability findings to identify security risks and remediation actions.
• Support implementation of security controls, hardening requirements, secure configurations, and vulnerability remediation.
• Assist with technical security documentation, control implementation evidence, risk analysis, and remediation plans.
• Evaluate computer and network security technologies and provide practical recommendations to improve system protection.
• Support security engineering activities across enterprise, cloud, and hybrid environments.
• Coordinate with compliance, privacy, ISSO, and project management staff to support assessment readiness and continuous monitoring.
• Other duties as assigned.

What We Need

• Undergraduate degree.
• At least 5 years of enterprise security architecture, security engineering, and system administration experience.
• Excellent knowledge of computer and network security principles, procedures, and technologies.
• Ability to understand and apply HHS and SAMHSA security requirements.
• Experience identifying security gaps during development and supporting remediation with technical teams.
• Strong troubleshooting, documentation, and stakeholder communication skills.

Even Better

• Industry-recognized cybersecurity certification such as Security+, CISSP, CAP, CEH, GCIH, OSCP, or equivalent.
• Experience supporting HHS, SAMHSA, or federal health systems.
• Experience with cloud security, DevOps, CI/CD, infrastructure as code, or CDM capabilities.
• Experience using vulnerability scanning, configuration assessment, and security monitoring tools.

Clearance Requirement

• Active DoD Secret Clearance