Senior Information Assurance Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the design, implementation, and upkeep of sophisticated security measures within AWS cloud environments functioning at DoD IL5, ensuring the architecture is prepared for prospective IL6 integration.

• Design and manage security testing integrations within Azure DevOps (ADO) and Git platforms.

• Integrate and automate Application Security (AppSec) within the CI/CD pipeline.

• Administer, leverage, and enhance security testing tools, particularly Fortify and Tenable, to pinpoint, evaluate, and facilitate the correction of code and infrastructure vulnerabilities.

• Carry out ongoing compliance audits and security evaluations.

• Utilize foundational (junior-level) knowledge of the DoD Risk Management Framework (RMF) to assist in the creation and upkeep of artifacts necessary for Authority to Operate (ATO).

• Examine complex security scan outcomes, collaborate cross-functionally with development teams to address findings, and uphold stringent DoD security configuration standards (e.g., STIGs, SRGs).

• Offer insights to internal project teams comprising both contract partners and government clients to guarantee effective utilization of IT solutions, tools, and processes.

⛳️ Requirements

• MA/MS in a relevant discipline with at least 10+ years of pertinent experience, or BA/BS in a related field with a minimum of 15+ years of relevant experience.

• A minimum of five years' experience in monitoring, testing, troubleshooting, and executing corrective actions for Cybersecurity IT systems.

• Active Secret security clearance; U.S. citizenship is required.

• CompTIA Security+ Certification.

• Direct operational experience with security scanning and vulnerability management tools, especially Fortify and Amazon Inspector.

• Proficiency in Git and CI/CD orchestration using Azure DevOps (ADO).

• Demonstrates essential knowledge of the RMF lifecycle, ATO processes, and DoD security methodologies, along with a practical grasp of key technologies such as defensive cyber event logging, application security, commercial DoD PKI, and AWS/Azure cloud authorization.

• Experience in developing metrics from related Cybersecurity elements, including trend analysis.

• Capacity to provide input to internal project teams that include both system users and IT personnel, as well as functional proponents and Army communities, to ensure effective utilization of IT solutions, tools, and processes.

🏝️ Benefits

• Comprehensive health and wellness benefits, encompassing medical, dental, and vision plans.

• Access to company-sponsored retirement savings options with matching contributions.

• Opportunities for professional advancement and ongoing education.

• Additional perks such as discounts on various services and products.

• Remote work.