Senior/Staff Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Automate the generation of security evidence and align controls under the Risk Management Framework (RMF) to facilitate continuous authorization.

• Develop control implementations and the associated body of evidence, including documentation of controls inherited from the software factory.

• Perform security audits and risk assessments, and devise and execute remediation strategies.

• Convert compliance requirements into actionable engineering decisions for the team.

• Foster trust with security reviewers and authorizing officials while clearly articulating technical trade-offs.

• Collaborate with and mentor government teams to ensure sustainability of security practices post-engagement.

• Work alongside the Skylight team and government staff to understand how the program office implements changes.

• Identify areas where testing and security hinder delivery speed.

• Partner with government engineers and other contractors as tools and processes continue to evolve.

⛳️ Requirements

• Ability to identify risks by consistently reviewing all components of the application for vulnerabilities and cataloging them.

• Capability to mitigate and avoid risks through proactive collaboration with teams to construct secure and compliant systems.

• Knowledge of common sources of vulnerability information.

• Understanding of regulatory requirements pertaining to security and compliance.

• Experience guiding systems through the RMF and Authorization to Operate (ATO) processes, ideally within the Department of Defense (DoD), including authoring control implementations and the body of evidence.

• Proficient in automating the generation of security evidence or mapping controls under RMF.

• Competent in writing clean, functional, and reusable code in at least one programming language.

• Background in working on cross-functional teams (product, design, engineering, operations) in iterative delivery environments.

• Proven track record of alignment and accountability on remote teams.

• A mindset and work style that resonate with our core values.

• Familiarity with continuous ATO, eMASS, and Plan of Action and Milestones (POA&M) management.

• Experience documenting inherited controls from a cloud platform or DoD software factory (such as Cloud One, MDaaS, Platform One, or similar).

• Knowledge of compliance as code, including GitLab CI, Checkmarx or other static code scanning tools, and Software Bill of Materials (SBOM) generation.

• Experience with cloud infrastructure and infrastructure as code methodologies.

• Proven experience delivering technology solutions within government, regulated industries, or other public-benefit contexts.

• All work must be performed within the U.S., excluding U.S. territories.

• U.S. citizenship is required for employment eligibility.

• Must be eligible to obtain a Common Access Card (CAC) and any special access required for this contract.

• Successful completion of a company background check is mandatory.

🏝️ Benefits

• Medical insurance, dental insurance, and vision insurance.

• Short-term and long-term disability insurance.

• Life and Accidental Death & Dismemberment (AD&D) insurance.

• Dependent care Flexible Spending Account (FSA), healthcare FSA, and health savings account.

• Dollar-for-dollar 401(k) match up to 10% of your salary with no vesting period.

• Flexible paid time off policy (typically around 25 days per year), plus 11 paid federal holidays.

• Up to 12 weeks of paid time off for all eligible new parents through birth, adoption, or foster care.

• Performance incentives, including annual salary increases, annual performance bonuses, spot bonuses, and stock options.

• Bonuses for business development and sales initiatives.

• Referral bonuses for successful candidate placements.

• Annual $2,000 allowance for professional development opportunities.

• Annual $750 allowance for technology-related purchases.

• Annual swag budget of $100 to showcase your Skylight pride with merchandise (hoodies, hats, etc.).

• A flexible, remote-friendly work environment.

• An empowering atmosphere that enables you to utilize your skills for the public good.