Information Security Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Assist in fulfilling the cybersecurity requirements across the DSOP platform.

• Ensure the secure configuration, ongoing monitoring, vulnerability management, and compliance within DSOP environments.

• Conduct security assessments for containers and Kubernetes environments.

• Develop hardened configurations and STIG-compliant baselines.

• Create and uphold security controls for container registries, images, and pipelines.

• Execute vulnerability scanning, track remediation efforts, and generate reports.

• Aid in RMF accreditation, continuous monitoring, and security engineering activities.

• Work together with DevSecOps and infrastructure teams to embed security into CI/CD processes.

• Apply zero-trust security models and ensure secure deployment workflows.

• Oversee secrets management, certificate rotation, and identity enforcement.

⛳️ Requirements

• Must possess an active DoD Secret security clearance; candidates lacking at least a Secret clearance will not be eligible.

• 8–10+ years of experience in cybersecurity or security engineering is required.

• Proficiency in Kubernetes security, container scanning tools, and image hardening is essential.

• A Bachelor’s Degree in Computer Science, Engineering, or a related technical field with a focus on Information Security or Cyber Security is preferred; alternatively, 4+ years of equivalent professional experience may be considered.

• Familiarity with DoD STIGs, RMF, ACAS, Nessus, and OpenSCAP is expected.

• Experience in supporting secure cloud or platform environments is necessary.

• Security certifications such as Security+, CEH, CISSP, or CCSK are preferred.

• Candidates must be based in the U.S.

🏝️ Benefits

• Flexible remote work arrangement.

• Working hours aligned with Eastern Standard Time (8 am to 5 pm).