Contact Us
← Back to Careers

Security Engineer - Federal (FieldOps)

Tysons, Virginia, United States · Engineering · Employment Type: Full-Time

C3 AI (NYSE: AI), is the Enterprise AI application software company. C3 AI delivers a family of fully integrated products including the C3 Agentic AI Platform, an end-to-end platform for developing, deploying, and operating enterprise AI applications, C3 AI applications, a portfolio of industry-specific SaaS enterprise AI applications that enable the digital transformation of organizations globally, and C3 Generative AI, a suite of domain-specific generative AI offerings for the enterprise. Learn more at: C3 AI

C3 AI is seeking an experienced Federal Security Engineer to serve as the named technical owner of release-gate evidence, Continuous Monitoring (ConMon) automation, and the security engineering interface with our FedRAMP and ATO boundary partner, for our Federal team in Tysons, Virginia. The ideal candidate will ensure Federal deployments meet C3 AI's rigorous security standards and comply with Federal Security Requirements across the full deployment lifecycle.

This role requires US Citizenship or US Permanent Residence. Active security clearance (Secret or higher) is required.

Responsibilities:

  • Own per-release gate evidence across the 8 gates defined in the Federal Release-Gate Standard (image CVE disposition, allowlist, SCAP/STIG, FIPS validation, Federal BOM) — no evidence, no GA
  • Work with cross-functional teams to build and maintain ConMon automation: generated Bill of Materials (BOM), automated drainable-vs-structural POA&M classification, and a live ConMon metrics feed
  • Serve as the engineering-level interface with SMX on FedRAMP boundary-register items (image provenance, patch-uplift vs. CA-6, SCAP scope)
  • Address unique Federal customer security requirements without compromising core solution integrity
  • Support high-visibility defense and intelligence projects with stringent security requirements
  • Triage and resolve security vulnerabilities reported by Federal customers
  • Ensure solutions comply with technical security requirements for domain-specific programs (e.g., STIG, SCAP/OpenSCAP)
  • Manage hardened container registries (e.g., Iron Bank, Chainguard) for Federal deployments
  •  Work with product, engineering, and compliance teams to upstream controls and resolve issues
  • Overlay customer-specific controls while maintaining C3 AI's standard security posture
  • Discover and remediate security vulnerabilities in Federal systems and applications
  • Collaborate with Information Security, Product, Engineering, and Operations to implement security best practices and ensure compliance with industry standards
  • Stay up-to-date with the latest security trends, vulnerabilities, and technologies

Qualifications:

  • Bachelor's degree in Computer Science, Information Security, or a related field
  • Minimum of 5+ years of experience in information security, DevSecOps, or a related field
  • Strong understanding of security principles, practices, and technologies
  • Experience with vulnerability management activities (CVEs, IOCs, etc.)
  • Experience with Linux and scripting languages such as JavaScript, Shell, and/or Python
  • Excellent problem-solving skills and attention to detail
  • Strong communication and collaboration skills
  • Active DoD 8570 IAT II or above certification (e.g., CISSP or Security+), or ability to obtain
  • Hands-on experience with SCAP/OpenSCAP tooling and automated STIG scanning/remediation

Preferred Qualifications:

  • Experience with cloud security and securing cloud-based applications
  • Familiarity with regulatory requirements and industry standards such as NIST 800-53, CMMC, and FedRAMP
  • Experience with security automation and orchestration tools
  • Experience with hardened container registries (e.g., Iron Bank, Chainguard), FIPS 140-2/3 validation, and SBOM generation/traceability tooling

Candidates must be authorized to work in the United States without the need for current or future company sponsorship.

C3 AI provides excellent benefits, a competitive compensation package and generous equity plan. 

Virginia Base Pay Range
$134,000—$167,000 USD

C3 AI is proud to be an Equal Opportunity and Affirmative Action Employer. We do not discriminate on the basis of any legally protected characteristics, including disabled and veteran status. 

Apply for this role

* indicates a required field

Upload a file
Or paste as text
By clicking the “I Accept” button, you confirm that you have read C3 AI’s Applicant & Candidate Privacy Notice [https://c3.ai/c3ai-inc-applicant-and-candidate-privacy-notice] and you provide the specific consents identified below. Except where C3 AI expressly asks for your consent, C3 AI processes your personal data for recruitment on the basis of its legitimate interests and to take steps at your request before any employment relationship, and you are not required to consent to that processing: C3 AI collects your personal data for the purposes of managing C3 AI's recruitment related activities as well as for organizational planning purposes globally. Consequently, C3 AI may use your personal data in relation to the evaluation and selection of applicants including for example setting up and conducting interviews and tests, evaluating and assessing the results thereto and as is otherwise needed in the recruitment processes including the final recruitment. Some evaluations are assisted by automated tools: C3 AI uses AI-based matching to compare your application against the requirements of the role and, for some roles, an AI-based “Voice AI” tool that records and analyzes a voice screening interview. A member of our team reviews the results and makes the final decision, and no decision is made based solely on automated processing. You may request more information about the logic involved, request a review by a person, and — for voice interviews — decline to be recorded and request a standard interview instead, in each case without any penalty to your application. C3 AI does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, C3 AI has international sites and C3 AI uses resources located throughout the world. C3 AI may from time to time also use third parties to act on C3 AI's behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within C3 AI group of companies as well as to third parties acting on C3 AI's behalf, including also transfers to servers and databases outside the country where you provided C3 AI with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area (“EEA”) and in the United States of America; in such cases, the transfer is based on, as applicable, the Standard Contractual Clauses (according to Commission Implementing Decision (EU) 2021/914, and, for transfers from the United Kingdom, the UK International Data Transfer Addendum), the EU-US Data Privacy Framework where applicable, or other GDPR-compliant mechanisms. You may withdraw any consent at any time, and exercise your rights of access, correction, deletion, objection, and (where applicable) your ARCO rights, by contacting C3 Legal at c3legal@c3.ai withdrawing consent will not affect processing carried out before the withdrawal. C3 AI will not retaliate against you for exercising these rights or for declining to consent. Full details of how C3 AI handles your information, how long it is kept, and your rights are set out in our Applicant & Candidate Privacy Notice [https://c3.ai/c3ai-inc-applicant-and-candidate-privacy-notice]. *

If yes, you can always opt-out by replying STOP.

Voluntary Self-Identification


For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in C3 AI’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

We use Greenhouse's AI-powered Talent Matching tool to compare your application against our job requirements.

Opt out of AI-based evaluation