Security Engineer

As a Security Engineer at Element, you'll be responsible for performing migrations of cloud infrastructure, particularly from one AWS environment to another with a strong focus on security and compliance. You'll collaborate within a multi-disciplinary team, ensuring that security best practices guide the entire development lifecycle. This includes conducting security code reviews, developing secure applications, and maintaining strict compliance with agency protocols. Your role will also involve troubleshooting various technical issues, ensuring that the software and infrastructure you help architect are free from security flaws.

To qualify for the Security Engineer position at Element, candidates must possess a Bachelor's degree in Computer Science or a related field, along with at least 6 years of experience in System Security or related roles. Extensive knowledge in Information Security, AWS environments, and application security protocols, such as OWASP and ASVS, is essential. Familiarity with security and compliance standards, particularly NIST RMF (800-53 rev 5), is also required. Additionally, candidates should be U.S. citizens or permanent residents.

At Element, the work environment for Security Engineers is primarily remote, promoting flexibility and work-life balance. Although the position is mainly remote, some client site work may be required, estimated at less than 10%. This setup allows team members to collaborate effectively through digital platforms while still fostering a sense of belonging and community among coworkers. Collaboration and creativity are at the forefront of Element's culture, making it an engaging place to work.

Element is deeply committed to fostering a culture of diversity and inclusion. This is evident in our hiring practices, team dynamics, and collaborative projects. We believe that every individual's perspective enhances our work and leads to more innovative solutions. Element actively works to create a safe and welcoming environment, ensuring that everyone feels valued and empowered to share their ideas, thus driving impactful changes in the government service landscape.

The salary range for Security Engineers at Element is between $110,000 and $145,000 annually. This range isn't a fixed guarantee, as compensation can vary based on experience, geographic location, and contractual obligations. Element evaluates each candidate's background and qualifications during the hiring process to determine the most appropriate salary, ensuring they remain competitive within the industry.

When answering this question, aim to highlight your passion for technology and security, as well as your desire to make a positive impact in government services. Share specific reasons like Element's commitment to innovation, its supportive culture, or its focus on user-centric design that resonate with your career goals.

In your response, emphasize the importance of integrating security best practices throughout the development lifecycle. Discuss your experience with security frameworks such as NIST RMF, and describe how you collaborate with team members to maintain compliance and conduct regular code reviews that enforce security measures.

In your answer, choose a specific problem that demonstrates your technical skills and your ability to collaborate with others. Explain the situation clearly, the steps you took to resolve it, what tools or methodologies you used, and the successful outcome of that challenge.

When discussing your AWS experience, talk about specific projects where you've managed cloud infrastructure, focusing on migration, security compliance, or automation of operations. Highlight any tools you’ve used like AWS Trusted Advisor and your understanding of cloud security principles.

Indicate your commitment to ongoing professional development. Mention industry conferences, online courses, blogs, or certifications relevant to security that you follow. This shows your proactive approach to staying informed about the evolving security landscape.

In your response, explain the process you typically follow during security code reviews, such as checking for compliance with security practices and identifying potential vulnerabilities. Highlight any collaborative approaches you take with other team members during these reviews to foster a culture of shared responsibility.

Your answer should reflect familiarity with industry-standard tools used for threat modeling (such as STRIDE, PASTA, etc.) and risk assessment. Describe how you assess risks in applications and how you've utilized these tools to enhance security in past projects.

Discuss your approach towards treating security as a fundamental component of design rather than an afterthought. Explain how you integrate security control requirements at the onset and collaborate with stakeholders to ensure that applications are built securely.

Select an instance where your security interventions significantly improved the outcome of a project. Whether it was mitigating a vulnerability, enhancing user data protection, or improving overall system security, clearly outline your contributions and the positive implications they had on the project.

When addressing this question, express your ambitions for growth within the field of security engineering. Whether it's advancing to leadership roles, specializing in certain security domains, or contributing to groundbreaking tools and methodologies, communicate how you see yourself evolving your skills and impact in the technology sector.