{"id":3587909,"url":"https://alion.io/job/citian-senior-security-engineer","title":"Senior Security Engineer","company":{"id":673482,"name":"Citian","domain":"citian.com","url":"https://alion.io/company/citian","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":115,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Machine Learning","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Auth0","optional":true},{"name":"FedRAMP","optional":true},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-11-01T14:33:46Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-06T01:12:13Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":3},"description":"Citian is a fast growing, venture backed SaaS technology company based in Washington, DC. Our software solutions revolutionize how our transportation and infrastructure systems - roads, rail, transit, bicycle, pedestrian - operate.\nOur tech solutions:\nReduce traffic fatalities\nEnhance pedestrian accessibility\nEmpower system operators to save time & money\nYou’ll work with some of the brightest minds in the software and transportation industries. Our engineers and data scientists apply the latest in emerging tech, Artificial Intelligence, and Machine Learning to build smarter, more advanced tools for our diverse client base. We work with clients across the United States, with global ambitions in the years ahead.\nWho You Are:\nYou're a hands-on security engineer who has secured production cloud systems against regulatory or contract requirements, and you know what an assessor will ask for. You set the standard, write infrastructure code, review changes, and help teams fix problems rather than handing them a list. You can explain risk and trade-offs clearly to engineers, executives, and our customers' security teams.\nYou'll work with engineering and company leadership to secure systems that public agencies rely on, set our security standards, and help us expand to more states.\nExpected Duties:\nLead security and compliance across our products: crash analytics, asset management, and crash data intake for state agencies. Work with engineering and data teams to set requirements, build controls, track fixes and prepare for audits and assessments.\nSecure our crash data intake product, which handles criminal justice information in AWS GovCloud, in a way we can repeat for each new state: identity and MFA, encryption and key management (including FIPS where required), network isolation, logging and alerts, backup and recovery, retention and deletion, and limits on what data can leave.\nSet and enforce access controls for regulated customer data, including contract limits on access from outside the US and through third-party tools, with the engineering and data teams that run those systems.\nTurn customer contracts and security frameworks, such as SOC 2 and CJIS, into specific controls, each with an owner, a check (automated where possible) and current evidence. Support independent assessments that contracts require, such as against NIST SP 800-53 Moderate.\nBe the technical contact for our customers' security and compliance teams, with Customer Success: questionnaires, architecture reviews and audits.\nRun how we find and rank vulnerabilities across infrastructure, code and dependencies. Work with the teams that own those systems to prioritize fixes, confirm them and track exceptions.\nSet up security monitoring and incident response, and practice it with the engineering on-call team.\nWrite security standards for engineers and AI coding agents, and build checks into how we develop and deploy.\nDecide when we need outside help, such as assessors, penetration testers or managed services, and lead that work.\nRequired Skills & Experience:\nBachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience\n6+ years in security, platform or infrastructure engineering, with a strong security focus in AWS\nHas secured production systems against defined requirements, including building controls, keeping evidence and supporting independent assessments\nInfrastructure as code (for example, AWS CDK or Terraform) and core AWS security (IAM, KMS, networking, logging)\nApplication and data security, including keeping customers' data separate and authorization; working knowledge of TypeScript, JavaScript or Python\nHas investigated and responded to production security incidents\nHas worked directly with customer security or compliance teams\nUses AI coding tools in daily work, checks their output, and keeps sensitive data out of unapproved AI services\nPreferred Qualifications:\nCJIS, AWS GovCloud, FedRAMP, GovRAMP (formerly StateRAMP) or NIST SP 800-53 assessments, especially for state or local government\nSOC 2 Type 2, including compliance tools such as Drata\nProtecting personal data in data pipelines, including AI processing\nIdentity providers such as Auth0, Okta or Amazon Cognito\nTransportation or public safety data\nSecurity certifications, such as AWS Security Specialty or CISSP\nLocation and screening:\nThis job must be done from within the United States. Access to some customer systems and data requires agency background screening, including fingerprint-based checks, and ongoing security training.\nSalary Range: $150,000 - 200,000 base salary\nYour Citian Advantage:\nCompetitive salary and benefits package including medical, dental, and vision insurance and generous PTO.\n401(k) company match and monthly commuter transportation benefit\nOn-site gym and free snacks in the office\nHigh-growth potential and opportunities for advancement within a fast growing, venture-backed SaaS startup!\nLet's build smarter cities together! Learn more about Citian here: www.citian.co\n** Citian is an organization committed to diversity and inclusion to drive our business results and create a better future every day for our diverse employees, clients, partners, and communities. We believe a diverse workforce allows us to match our growth ambitions and drive inclusion across the business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.\nEqual Opportunity/Affirmative Action Employer Minorities/Females/Protected Veterans/Persons with Disabilities","description_format":"text","description_chars":5734,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Transport Infrastructure","Construction Management Software"],"lifecycle":[{"event":"open","at":"2026-11-01T14:44:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":115,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/citian-senior-security-engineer","json_url":"https://alion.io/job/citian-senior-security-engineer.json","meta":{"generated_at":"2026-11-06T02:01:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3216,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673482},"rest":"https://alion.io/mcp/rest/get_company?id=673482"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcitian-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcitian-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcitian-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citian-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcitian-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3587909}},{"tool":"search_jobs","arguments":{"company":"citian.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3587909},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}