Overview:
In this role you will design, develop, and implement secure information systems to support mission operations. You will work with cross-disciplinary teams to integrate security controls and maintain system resilience against evolving threats. You will lead vulnerability assessments, security monitoring, and DevSecOps integration to sustain secure software lifecycles. Your work will help ensure compliant risk posture through RMF processes and continuous security testing. This opportunity offers impact on national security programs and exposure to advanced cyber defense technologies. Compensation / Benefits Paid Time Off 11 paid Holidays 401K with 6% company match Flexible Schedules Discounted Stock Purchase Plans Technical Upskilling, Education and Training Support
Responsibilities:
Apply security engineering principles across system design, lifecycle, authentication/authorization, cryptography, intrusion detection, contingency planning, auditing, configuration management, and change control Conduct or support technical cybersecurity assessments and security audits Coordinate with cybersecurity personnel to recommend risk mitigations Identify vulnerabilities and non-compliance with cybersecurity standards and regulatory requirements Perform vulnerability scans with approved tools and report remediation progress Collaborate with DevSecOps teams to review scan results and remediate findings Install, configure, and maintain security scanning/monitoring tools integrated in system environments and pipelines Support RMF authorization by reviewing documentation and providing risk-based recommendations during ATO activities while tracking POA&Ms
Key requirements:
MS degree and 15+ years of relevant experience; additional years may substitute for degree Active TS/SCI with Polygraph Experience performing vulnerability scanning and reporting to technical teams Experience reviewing threat intel and vulnerability advisories Experience monitoring systems with SIEM tools Incident investigation and response experience Experience tracking CVEs and mapping to controls Auditing systems for secure configuration baselines and policies Experience using at least two vulnerability scanning tools (e.g., AWS Inspector, Tenable, Rapid7 Nexpose, SonarQube, Fortify, OWASP tools) At least one certification: CISSP, Splunk, Network+, Security+, OSCP, CEH, CASP+, ISSEP Collaborative teamwork Effective communication Problem-solving mindset Vulnerability scanning Security monitoring RMF/ATO processes
