Software Engineer II (Remote)

Job Summary: Neumo is a PE-backed govtech company formed from the merger of Avenu, ITI, and GovOS, delivering payments, DMV, justice, revenue compliance, and public administration solutions to state and local government clients nationwide. Our InfoSec program operates under SOC 1, SOC 2, and PCI DSS, and active pursuit of FedRamp High and GovRamp. We're growing our InfoSec team and looking for a hands-on Security Engineer who blends deep technical depth across the security stack with fluency in AI-assisted tooling. You'll own and harden our perimeter and cloud defenses, build detection and automation as code, and be a first responder when incidents happen.. Duties and Responsibilities: Perimeter, Cloud & Application Security Own perimeter security controls: WAF, firewall, and CDN policy — including authoring and tuning bot management rules to block automated abuse without harming legitimate traffic. Write and maintain Terraform to manage security infrastructure as code across cloud and edge environments (version-controlled, peer-reviewed, repeatable). Secure our AWS/Azure environments: harden configurations, close CSPM findings, and partner with engineering on secure-by-design reviews. Own email security end-to-end: configure and tune the secure email gateway, enforce DMARC/SPF/DKIM (including moving DMARC toward quarantine/reject), and manage attachment sandboxing and URL rewriting/detonation. Run phishing simulation and awareness campaigns, report on click/report rates, and use results to tighten filtering rules and target training. Detect and respond to business email compromise and account takeover, mailbox forensics, inbox-rule abuse, OAuth/app-consent abuse, and coordinating with IT on containment. SIEM, Logging & Detection Engineering Own log source onboarding across cloud (AWS/Azure), identity, endpoint, network/perimeter, and email systems, ensuring coverage gaps are identified and closed. Build, tune, and maintain correlation rules and detection content in the SIEM, continuously reducing false positives/negatives and improving signal-to-noise for the team. Define and maintain log retention, normalization, and parsing standards to support investigations, audits, and PCI DSS / SOC 2 / FedRAMP logging requirements. Build dashboards and alerting for key telemetry (identity, servers, endpoint, cloud, perimeter, email, critical systems) and report on SIEM health, coverage, and detection efficacy to the CISO. Map detection content to a framework such as MITRE ATT&CK and close identified coverage gaps. Detection, Response & Endpoint Operate and tune EDR and MDR tooling; triage alerts across the security stack and drive them to resolution. Participate in incident management as needed, including after-hours response: investigation, containment, remediation, and clear post-incident write-ups. Support annual incident response tabletop exercises and help mature our IR runbooks. Contribute to red team / adversarial simulation exercises and support annual third-party penetration testing, translating findings into fixes. Identity, Endpoint & Zero Trust Advance our Zero Trust architecture across identity, network segmentation, and access policy. Administer MDM and BYOD programs, balancing usability with device compliance and data protection standards. AI-Augmented Security Engineering Use AI coding assistants and agentic tooling to accelerate detection engineering, automation, and Terraform development, while applying sound judgment about what AI-generated output ships to production. Evaluate and pilot AI-driven security tooling (e.g., AI-assisted triage, threat detection, or bot/traffic classification) and help set guardrails for safe internal use of AI. Education and Experience: 5+ years in a security engineering or security operations role, with direct, hands-on experience across most of: perimeter/WAF and bot management, EDR/MDR, SIEM, MDM/BYOD, Zero Trust, cloud security, and email security. Hands-on SIEM experience: onboarding log sources, writing/tuning correlation and detection rules, and managing retention and parsing. Hands-on email security experience: secure email gateway administration, DMARC/SPF/DKIM enforcement, and BEC/phishing investigation (e.g., Proofpoint, Abnormal Security, Mimecast, or Microsoft Defender for Office 365). Experience participating in incident response, including on-call or after-hours response to active incidents. Experience in a regulated or compliance-heavy environment (PCI DSS, SOC 2, FedRAMP/GovRAMP, or similar). Relevant certifications: OSCP, GPEN, GCIH, Security+, or CISSP. Experience with tools such as Cloudflare, SentinelOne, Tenable, Wiz, or Delinea (or direct equivalents). Knowledge, Skills and Abilities: Working proficiency with Terraform or another IaC tool, plus scripting ability (Python, Bash, or similar) for automation. Exposure to red teaming or offensive security: as a practitioner, or in close partnership with red team / pen test engagements. Comfort using AI tools (Copilot-style coding assistants, LLM-based analysis, agentic workflows) as part of daily engineering work, with a clear-eyed view of their limits. Clear written communication: you can document an incident or a control decision so a non-technical exec or an auditor can follow it. Work Environment : Office setting with a moderate noise level. The employee will work at an individual workstation, using a telephone and computer. Physical Demands : Must be able to remain seated for extended periods. Regular use of a computer and other office machinery, such as printers and copy machines. Occasional movement around the office. Frequent communication via telephone. Neumo Summary: With the backing of four decades of public sector expertise and corporate capability, Neumo has successfully supported government services. Neumo was honored and recognized for four (4) consecutive years as a GovTech 100 Company representing the top 100 companies focused on making a difference in and selling to state and local government agencies across the United States. Neumo is committed to helping communities thrive and brings a wealth of experience combined with innovation. Today, Neumo offers more administrative and financial support to government officials than any other organization. And with a responsive, client-focused approach, we foster partnerships that give our customers the certainty they need to accomplish more. Neumo offers a competitive benefits and compensation package and are looking for team members who will thrive in our dynamic environment. Neumo is an Equal Opportunity Employer. Selection for a position will be made without regard to race, religion, national origin, sex, political affiliation, marital status, non-disqualifying physical handicap, and age. Attachments (1) Security_Engineer_JD_Neumo.docx