← All roles

Security Engineer - Federal (FieldOps)

C3 AI· Engineering
Apply on company site
Tysons, VA$134k - $167kfull-timePosted 1mo ago

About the role

Federal Security Engineer responsible for release-gate evidence, Continuous Monitoring (ConMon) automation, and security engineering interface with FedRAMP and ATO boundary partners for the Federal team in Tysons, VA. Requires US citizenship or permanent residency and active security clearance.

Responsibilities

  • Own per-release gate evidence across the 8 gates defined in the Federal Release-Gate Standard (image CVE disposition, allowlist, SCAP/STIG, FIPS validation, Federal BOM) — no evidence, no GA
  • Build and maintain ConMon automation: generated Bill of Materials (BOM), automated drainable-vs-structural POA&M classification, and a live ConMon metrics feed
  • Serve as the engineering-level interface with SMX on FedRAMP boundary-register items (image provenance, patch-uplift vs. CA-6, SCAP scope)
  • Address unique Federal customer security requirements without compromising core solution integrity
  • Support high-visibility defense and intelligence projects with stringent security requirements
  • Triage and resolve security vulnerabilities reported by Federal customers
  • Ensure solutions comply with technical security requirements for domain-specific programs (e.g., STIG, SCAP/OpenSCAP)
  • Manage hardened container registries (e.g., Iron Bank, Chainguard) for Federal deployments
  • Work with product, engineering, and compliance teams to upstream controls and resolve issues
  • Overlay customer-specific controls while maintaining C3 AI's standard security posture
  • Discover and remediate security vulnerabilities in Federal systems and applications
  • Collaborate with Information Security, Product, Engineering, and Operations to implement security best practices and ensure compliance with industry standards
  • Stay up-to-date with the latest security trends, vulnerabilities, and technologies

Qualifications

  • Bachelor's degree in Computer Science, Information Security, or a related field
  • Minimum of 5+ years of experience in information security, DevSecOps, or a related field
  • Strong understanding of security principles, practices, and technologies
  • Experience with vulnerability management activities (CVEs, IOCs, etc.)
  • Experience with Linux and scripting languages such as JavaScript, Shell, and/or Python
  • Excellent problem-solving skills and attention to detail
  • Strong communication and collaboration skills
  • Active DoD 8570 IAT II or above certification (e.g., CISSP or Security+), or ability to obtain
  • Hands-on experience with SCAP/OpenSCAP tooling and automated STIG scanning/remediation

Skills

Required:Vulnerability managementConMon automationFedRAMP/SCAP/OpenSCAPScripting languages
Nice to have:Container securityRegulatory/compliance standards

Benefits

  • C3 AI provides excellent benefits, a competitive compensation package and generous equity plan.
Last updated Sep 10, 2026. Interested? Apply on the company site.

About C3 AI

Leading Enterprise AI Software Provider​

Explore a library of videos on C3 AI''s products and solutions. Stay informed and watch our videos to gain valuable industry knowledge.

AI SoftwareEnterprise AIAI ApplicationsC3 AI PlatformC3 AI CRMC3 AI StudioC3 AI Generative AI
Company profileWebsite

More open roles at C3 AI