Security Engineer - Federal (FieldOps)

About this role

C3 AI seeks an experienced Federal Security Engineer to own release-gate evidence, continuous monitoring automation, and FedRAMP compliance for federal deployments. The role requires ensuring federal systems meet rigorous security standards and regulatory requirements across the full deployment lifecycle.

What you'll do

• Manage release-gate evidence across 8 federal gates including CVE disposition, SCAP/STIG validation, and FIPS compliance
• Build and maintain continuous monitoring automation including Bill of Materials generation and POA&M classification
• Serve as engineering interface with FedRAMP boundary partners on image provenance and patch management
• Triage and resolve security vulnerabilities from federal customers and perform automated STIG scanning
• Manage hardened container registries (Iron Bank, Chainguard) and ensure SBOM traceability for federal systems
• Collaborate with product, engineering, and compliance teams to upstream controls and maintain security posture

What they're looking for

• FedRAMP, NIST 800-53, and CMMC compliance frameworks
• SCAP/OpenSCAP tooling and automated STIG scanning
• Linux administration and scripting (Python, Shell, JavaScript)
• Container security and hardened registries (Iron Bank, Chainguard)
• Vulnerability management and CVE handling
• FIPS 140-2/3 validation and SBOM generation
• Security automation and DevSecOps practices
• DoD 8570 IAT II certification (CISSP or Security+)

Benefits

• Competitive compensation package
• Excellent benefits
• Generous equity plan
• Work on high-visibility defense and intelligence projects
• Opportunity to shape federal security standards
• Collaborative cross-functional environment