Security Engineer - Remote

ICF International, Inc.

Job Overview

Location

Reston, VA

Job Type

Full-time

Full Job Description

📋 Description

• ICF International, Inc. is seeking a Security Engineer to ensure environments and applications meet Federal Security Standards in a consulting environment, supporting secure development and compliance for government and enterprise clients.
• The role involves performing static and dynamic application security testing (SAST/DAST), creating and updating threat models for FISMA systems, assisting in security incident response, documenting system security and contingency plans, reviewing policies for compliance, and using tools like Nessus, Snyk, AWS GuardDuty, and AWS Inspector to identify and remediate vulnerabilities.
• The Security Engineer will collaborate with development and DevOps teams to review and correct code, harden Linux-based machines and cloud infrastructure, apply cryptography to secure web applications and data at rest, and ensure secure paths to production for new applications with proper documentation and approvals.
• ICF is a global advisory and technology services provider that combines expertise with technology to solve complex client challenges, foster innovation, and support employee growth in an inclusive, equal-opportunity workplace that values diverse perspectives and provides reasonable accommodations.
• The role offers the opportunity to deepen expertise in federal security standards (NIST 800‑53, DoD STIGs), cloud security (AWS/Azure/GCP), incident response, and secure software development lifecycle practices while working remotely with core hours aligned to Eastern Time and occasional travel for collaboration.

🎯 Requirements

• Bachelor’s Degree
• 5+ years of professional security engineering experience
• Ability to obtain and maintain a Public Trust clearance
• U.S. residency and work authorization, with all work performed in the U.S.
• Resided in the U.S. for three (3) full years out of the last five (5) years
• Hands-on experience with NIST 800‑53 security controls, system hardening via DoD STIGs, incident response leadership, data management, applied cryptography, cloud security (AWS/Azure/GCP), OWASP Top Ten, CWE Top 25, Linux command line, and scripting in Python, Perl, or similar
• Prior experience in consulting or healthcare is advantageous
• Strong engineering background and application architecture experience
• Federal government contracting work experience
• One or more preferred certifications: OSCP/OSCE/OWSE, CISSP, GPEN, GXPN, Security+, CEH
• Good leadership and team-working skills
• Highly effective analytical, problem-solving, and decision-making capabilities
• Excellent communication and interpersonal skills for interfacing at all business levels
• Organized, detail-oriented, able to prioritize and multi-task
• Ability to self-organize, prioritize, and manage multiple projects under tight deadlines in a fast-paced environment
• Prior experience working remotely full-time

🏖️ Benefits

• Pay range: $98,614.00 - $167,644.00 based on full-time employment
• Remote work flexibility with core hours 10am–4pm Eastern Time and option to adjust schedule
• Opportunity to travel once per year for conferences or ICF location collaboration
• Access to reasonable accommodations for disabled veterans, individuals with disabilities, and sincerely held religious beliefs
• Equal opportunity employer committed to diversity, inclusion, and fair hiring practices, including consideration of qualified applicants with arrest and conviction records
• Support for professional growth through expertise sharing, collaboration, and goal achievement in a global advisory and technology services environment

Skills & Technologies

Python

AWS

Azure

GCP

Linux

Remote

Degree Required

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

ICF International, Inc.

Visit Website

About ICF International, Inc.

Global advisory and technology services provider delivering strategy, analytics, and digital transformation to government and commercial clients. Core capabilities span energy, environment, health, education, and cybersecurity, integrating data science, policy expertise, and implementation support. Founded in 1969, publicly traded on NASDAQ as ICFI, with 9,000+ employees across more than 80 offices worldwide.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.