Cybersecurity Engineer - Clearance Required
About the role
Overview:
In this role you will secure the IronSled platform for production, maintaining authorization posture and driving vulnerability management. You will work closely with platform engineers and cyber teams to harden deployments and validate controls in a fast-paced DevSecOps environment. You’ll own RMF/ATO activities for the LIGER deployment and translate compliance into concrete engineering tasks. This is a hands-on security role that blends federal requirements with product delivery to support mission-ready software for government clients.
Responsibilities:
Lead RMF activities for the LIGER deployment, including system categorization, control tailoring, implementation, assessment, and continuous monitoring Own and maintain authorization artifacts: SSP, SAP, SAR, POA&M, aligned to DHS requirements Coordinate with ISSOs, Authorizing Officials, and cyber working groups to advance ATO and continuous authorization Translate NIST 800-53 controls into actionable engineering requirements for the LIGER platform Run and review vulnerability scans across CI/CD pipelines and runtime environments; triage and drive remediation Validate secure configurations and hardening baselines (CIS Benchmarks, DISA STIGs) on containers, hosts, and cloud resources Collaborate on cloud and container security in AWS GovCloud (IAM, network controls, secrets management, logging, runtime protection) Develop and maintain security policies, SOPs, and documentation for LIGER on customer infrastructure Track audit findings and POA&M items to closure; support FedRAMP-aligned control implementation Advise leadership on system risk levels, control effectiveness, and AI/LLM compliance considerations in federal environments
Key requirements:
Active TS/SCI security clearance 5+ years in designing, implementing, and monitoring federal cybersecurity solutions 5+ years RMF experience with ATO development and continuous monitoring against NIST 800-53 CISSP, CISM, or equivalent senior cybersecurity certification Experience securing LLM/GenAI/agentic AI systems and data handling Strong cloud security knowledge with AWS GovCloud or similar high-compliance environments Experience with vulnerability management workflows (scanning, triage, remediation tracking, reporting) Experience hardening systems to CIS Benchmarks or DISA STIGs Familiarity with secure SDLC practices: secrets management, access control, auditability, and CI/CD security Strong written communication for producing ATO artifacts; ability to translate compliance to engineering work clear written and verbal communication cross-functional collaboration problem-solving and analytical thinking RMF and NIST 800-53 ATO and continuous monitoring Vulnerability management tools and workflows
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.