{"id":192378,"url":"https://alion.io/job/c3-ai-security-engineer-federal-fieldops","title":"Security Engineer - Federal (FieldOps)","company":{"id":29,"name":"C3 AI","domain":"c3.ai","url":"https://alion.io/company/c3-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":69,"ghost_share":0.13,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":84,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Tysons, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":134000,"max":167000,"currency":"USD","period":"year","gross":null,"usd_annual":167000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"CVE","optional":false},{"name":"FedRAMP","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"CMMC","optional":true},{"name":"NIST 800-53","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-09-02T18:40:39Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-28T19:12:31Z","board_verified":true,"closed_at":null,"days_open":56,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":55},"description":"C3 AI (NYSE: AI), is the Enterprise AI application software company. C3 AI delivers a family of fully integrated products including the C3 Agentic AI Platform, an end-to-end platform for developing, deploying, and operating enterprise AI applications, C3 AI applications, a portfolio of industry-specific SaaS enterprise AI applications that enable the digital transformation of organizations globally, and C3 Generative AI, a suite of domain-specific generative AI offerings for the enterprise. Learn more at: C3 AI\nC3 AI is seeking an experienced Federal Security Engineer to serve as the named technical owner of release-gate evidence, Continuous Monitoring (ConMon) automation, and the security engineering interface with our FedRAMP and ATO boundary partner, for our Federal team in Tysons, Virginia. The ideal candidate will ensure Federal deployments meet C3 AI's rigorous security standards and comply with Federal Security Requirements across the full deployment lifecycle.\nThis role requires US Citizenship or US Permanent Residence. Active security clearance (Secret or higher) is required.\nResponsibilities:\nOwn per-release gate evidence across the 8 gates defined in the Federal Release-Gate Standard (image CVE disposition, allowlist, SCAP/STIG, FIPS validation, Federal BOM) - no evidence, no GA\nWork with cross-functional teams to build and maintain ConMon automation: generated Bill of Materials (BOM), automated drainable-vs-structural POA&M classification, and a live ConMon metrics feed\nServe as the engineering-level interface with SMX on FedRAMP boundary-register items (image provenance, patch-uplift vs. CA-6, SCAP scope)\nAddress unique Federal customer security requirements without compromising core solution integrity\nSupport high-visibility defense and intelligence projects with stringent security requirements\nTriage and resolve security vulnerabilities reported by Federal customers\nEnsure solutions comply with technical security requirements for domain-specific programs (e.g., STIG, SCAP/OpenSCAP)\nManage hardened container registries (e.g., Iron Bank, Chainguard) for Federal deployments\n Work with product, engineering, and compliance teams to upstream controls and resolve issues\nOverlay customer-specific controls while maintaining C3 AI's standard security posture\nDiscover and remediate security vulnerabilities in Federal systems and applications\nCollaborate with Information Security, Product, Engineering, and Operations to implement security best practices and ensure compliance with industry standards\nStay up-to-date with the latest security trends, vulnerabilities, and technologies\nQualifications:\nBachelor's degree in Computer Science, Information Security, or a related field\nMinimum of 5+ years of experience in information security, DevSecOps, or a related field\nStrong understanding of security principles, practices, and technologies\nExperience with vulnerability management activities (CVEs, IOCs, etc.)\nExperience with Linux and scripting languages such as JavaScript, Shell, and/or Python\nExcellent problem-solving skills and attention to detail\nStrong communication and collaboration skills\nActive DoD 8570 IAT II or above certification (e.g., CISSP or Security+), or ability to obtain\nHands-on experience with SCAP/OpenSCAP tooling and automated STIG scanning/remediation\nPreferred Qualifications:\nExperience with cloud security and securing cloud-based applications\nFamiliarity with regulatory requirements and industry standards such as NIST 800-53, CMMC, and FedRAMP\nExperience with security automation and orchestration tools\nExperience with hardened container registries (e.g., Iron Bank, Chainguard), FIPS 140-2/3 validation, and SBOM generation/traceability tooling\nCandidates must be authorized to work in the United States without the need for current or future company sponsorship.\nC3 AI provides excellent benefits, a competitive compensation package and generous equity plan. \nVirginia Base Pay Range\n$134,000—$167,000 USD\nC3 AI is proud to be an Equal Opportunity and Affirmative Action Employer. We do not discriminate on the basis of any legally protected characteristics, including disabled and veteran status.","description_format":"text","description_chars":4185,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Predictive Analytics","Defense AI","Energy AI","Supply Chain AI"],"lifecycle":[{"event":"open","at":"2026-09-02T19:45:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 67 · green card filings: 28","filings_12m":67,"filings_prev_12m":112,"green_card_filings_12m":28,"median_offered_wage_usd":166605,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":5}],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.849,"p_room":0.9,"age_days":55,"expected_fill_days":84,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":167000,"is_top_pay":true},"html_url":"https://alion.io/job/c3-ai-security-engineer-federal-fieldops","json_url":"https://alion.io/job/c3-ai-security-engineer-federal-fieldops.json","meta":{"generated_at":"2026-10-28T20:38:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28545,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":29},"rest":"https://alion.io/mcp/rest/get_company?id=29"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fc3-ai-security-engineer-federal-fieldops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fc3-ai-security-engineer-federal-fieldops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fc3-ai-security-engineer-federal-fieldops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/c3-ai-security-engineer-federal-fieldops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fc3-ai-security-engineer-federal-fieldops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":192378}},{"tool":"search_jobs","arguments":{"company":"c3.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":192378},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}