Security Engineer
Air Space Intelligence2 months ago
Boston, MA, USASenior
Responsibilities
- Harden and maintain cloud, endpoint, and software environments across AWS GovCloud and Microsoft GCC High.
- Investigate and remediate vulnerabilities, including container, image, dependency, and CI/CD security issues.
- Generate and manage software bills of materials, artifacts, and dependencies to improve supply chain security.
- Lead threat modeling sessions using methodologies such as STRIDE and PASTA.
- Build and maintain infrastructure as code using Terragrunt and Terraform.
- Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints.
- Monitor security events with cloud-native alerting services and SIEM tools.
- Collaborate with product, platform, and compliance teams to embed security in the software development lifecycle.
- Support incident response and post-incident reviews, growing toward leading these efforts over time.
Requirements
- Demonstrated coding skills in Python or Rust.
- Knowledge of container and CI/CD security, including Kubernetes, image hardening, and vulnerability scanning.
- Experience with supply chain security, including SBOMs, artifact generation, and dependency management.
- Experience securing government cloud environments, especially AWS GovCloud, and ensuring compliance with federal security requirements.
- Practical exposure to CMMC, NIST 800-53, and FedRAMP security frameworks.
- Hands-on experience with AWS GuardDuty, AWS Security Hub, Azure Defender, or comparable cloud-native incident alerting services.
- Experience monitoring security events using Microsoft Sentinel, Splunk, or comparable SIEM tools.
- Must be eligible to obtain a DoD security clearance.
- U.S. citizenship is required.
- Ability to work in the Boston office at least three days per week.
Tech Stack
Categories
About Air Space Intelligence
Air Space Intelligence builds decision-support software that lets operators simulate scenarios, predict risk, and optimize logistics and operations across aviation, defense, energy, and other critical infrastructure. The company sells enterprise platforms to government and commercial customers, including programs requiring U.S. security clearances. Founded in 2018 and headquartered in Boston, it is privately held and backed by investors such as Andreessen Horowitz, Spark Capital, and Renegade Partners.