Federal Security Engineering Manager

The role

Build and lead a new security engineering team for Horizon3's federal and defense environments. Set technical direction for federal cloud security, detection and response, and own the team's metrics, budget and vendor relationships.

What you will do

• Recruit, hire and onboard a team of cloud, SIEM and SOC security engineers for FedRAMP and IL4/IL5 environments
• Lead, coach and develop security engineers through 1:1s, goal setting and feedback
• Set technical direction for federal cloud security, including identity, network segmentation, encryption, hardening and logging
• Ensure controls meet FedRAMP and DoD Cloud Computing SRG requirements and are automated through Infrastructure as Code and policy-as-code
• Define the vision and roadmap for SIEM, logging and detection within the federal boundary
• Build the SOC function for the federal environment, including operating model, on-call and escalation paths
• Lead security incident response in federal environments, including required customer and government reporting
• Define team metrics such as MTTD, MTTR, detection coverage and false-positive rates, and report to leadership
• Own the team's budget, tooling strategy and vendor relationships, including FedRAMP-authorized tools
• Maintain security standards and SOPs aligned to NIST 800-53/800-171, FedRAMP, the DoD SRG, CIS and MITRE ATT&CK

Required qualifications

• U.S. citizenship and ability to meet DoD personnel security requirements for IL4/IL5 environments
• Ability to obtain and maintain a U.S. government security clearance
• 8+ years of experience in cybersecurity, including 5+ years in cloud security
• 3+ years of experience managing or technically leading security engineers
• Experience building and scaling a security engineering team
• Working knowledge of how FedRAMP High and DoD IL4/IL5 requirements shape cloud architecture, logging and incident response
• Strong technical foundation in cloud security architecture, IAM, encryption and key management, network security, secure SDLC and Infrastructure as Code
• Familiarity with SIEM and detection engineering concepts and SOC operating models
• Excellent written and verbal communication, including explaining technical risk to engineers, executives and government stakeholders
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience

Nice to have

• Experience standing up security capabilities for a SaaS product entering the federal market
• Prior experience operating within FedRAMP or DoD IL4/IL5 environments, hands-on or in leadership
• Background in incident management, detection engineering, or logs and events processing
• Experience with SOC build-out and scaling in a high-growth company
• Active clearance
• Certifications such as CISSP, CISM, CCSP, AWS Certified Security – Specialty, GCIH/GCIA or similar

Benefits

• Health, vision and dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave
• Stock options for all full-time roles
• Growth and career development opportunities
• Hybrid and remote work options

Before you apply

• U.S. citizenship is required
• Must be able to obtain and maintain a U.S. government security clearance

About the company

Horizon3 is a fast-growing, remote cybersecurity company. Its flagship NodeZero platform runs autonomous pentests across internal, external, cloud and hybrid cloud environments for organizations of all sizes, including government agencies.