← All roles

Senior Security Engineer

Kaizen Labs· Engineering
Apply on company site
Hybrid (New York, NY), Hybrid (Washington, D.C.)$220k - $280k + equityFull-timePosted 4mo ago

About the role

Senior Security Engineer role at Kaizen focusing on building and embedding security across infrastructure, platform, CI/CD, and applications to support federal and government-facing software. Responsible for compliance readiness (FedRAMP, CMMC, DoD IL), SSPs/POA&Ms, secure software supply chain, and secure-by-default engineering culture. Hybrid role based in New York, NY or Washington, DC.

Responsibilities

  • Architect and operationalize security across infrastructure, platform, CI/CD, and application layers, with a focus on AWS (including GovCloud) and Terraform
  • Lead readiness across federal compliance frameworks (FedRAMP, CMMC, and DoD Impact Levels), translating NIST 800-53 and related controls into real engineering implementations, and owning the SSPs, POA&Ms, and technical policy documentation
  • Build continuous compliance and audit-readiness workflows that make accreditation a byproduct of how we ship, not a separate workstream
  • Be smart about AI and tooling. Use automated AI-driven security scanning, modern hardened-image platforms like Chainguard, and other leverage points to multiply the impact of a small security team
  • Establish secure software supply chain practices: SBOMs, image signing, workload identity, and hardened deployment pipelines
  • Own the technical relationship with assessors, auditors, and federal security stakeholders. You are the credible technical voice in those rooms
  • Drive a secure-by-default engineering culture so residents and public servants can trust the systems we put in front of them

Qualifications

  • 5+ years of hands-on experience building and securing cloud-native platforms in AWS and Terraform. You can architect controls and also implement them yourself
  • Direct experience with federal authorization work in FedRAMP, CMMC, DoD IL, or comparable regulated environments. You don’t need to have shepherded a full authorization across the finish line, but you've done enough of the real work to know what it takes
  • Deep familiarity with NIST 800-53 and the ability to translate controls into pragmatic engineering work rather than checkbox compliance
  • Strong working knowledge of modern supply chain security: SBOMs, image signing, workload identity, secure CI/CD
  • Track record operating effectively in early-stage or fast-moving environments where you set the bar rather than inherit it

Skills

Required:AWSTerraformFedRAMP / CMMC / DoD ILNIST 800-53Software supply chain security

Benefits

  • Health & Insurance: 100% coverage across medical/dental/vision for employees and dependents, $100,000 life insurance, One Medical membership, Fertility and family-building support, 401(k) with 2% company match
  • Family & Time Off: 16 weeks parental leave for birthing parents, 10 weeks for non-birthing parents, unlimited PTO with a two-week minimum, federal holidays, company winter break, offsites
  • Office & Remote Setup: home office stipend, commuter benefit, expensed lunch, dinner/Uber after 7pm, company laptop
  • Wellness: NYC gym membership coverage or monthly reimbursement for non-NYC
  • Stipends: monthly utility stipend, quarterly home cleaning, annual professional development, annual recreation, quarterly pet care stipend
Last updated Oct 21, 2026. Interested? Apply on the company site.
Kaizen Labs logo

About Kaizen Labs

Modern, people-first software for America’s public services

Kaizen Labs helps city administrators transform resident experiences with simple digital products like websites, resident permitting, and recreation management.

softwaredigital productspublic servicesrecreationpermittingcommunitygovernment
Company profileWebsite

More open roles at Kaizen Labs