security
Posted Jun 4Cybersecurity Engineer
United StatesRemote
Responsibilities
- responsibilities are not exhaustive and additional
Requirements
- While working within the existing DoD processes, you will also work with other engineers to find the best paths forward and contribute to Unicorn mission capabilities and open source solutions to further streamline ongoing and future efforts.
- experience in cybersecurity engineering, with a focus on achieving accreditation for software systems within the DoD environment.
- In-depth knowledge of NIST-800 series standards, particularly NIST-800-53, and
- experience applying these standards to achieve accreditation.
- Strong understanding of cybersecurity principles, technologies, and best practices, including encryption, authentication, access control, and secure coding practices. Hands-on
- experience with security assessment tools and techniques, such as vulnerability scanning and security analysis.
- Familiarity with software development methodologies and practices, particularly Agile and DevSecOps.
- Excellent analytical and problem-solving skills, with the ability to assess complex systems and identify security risks.
- Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders.
- Experience with Open Security Controls Assessment Language (OSCAL)
- Ability to use OSCAL to manage control implementation and statements as “compliance as code”
- Familiarity with Department of the Air Force (DAF) security approval processes to include AFI 17-101
- Familiarity with DAF Gov Cloud offerings and inherited controls in Gov Cloud environments
- Familiarity with the Cloud Computing Security
- Experience working in a remote team or asynchronous work environment where focus, discipline, and comfort navigating/leveraging various communication forms and frequencies to disseminate and prioritize information and keep stakeholders informed
- experience delivering technology programs across the federal market. What We Do
- We proudly support defense and civil agencies across the U.S. government and we work closely with the creators of leading-edge software solutions to deliver value to the mission-owner by improving the security and consumability of commercial software products. What We Work On Kubernetes
- Cloud Environments (AWS/GCP and Azure)
- Infrastructure-as-code (like Terraform/Pulumi)
- Building Kubernetes and cloud native applications
Benefits
- Full compensation packages are based on candidate experience.
- Compensation ranges are established using national benchmarking data and apply across all geographic locations within the United States.
- Remote - USA $148,750 — $201,250 USD Who We Are
- We share a vision of freedom and security for the advancement of progress and innovation.
- Our commitment to this vision, and to our mission-driven customers, means a commitment to speed, user
- Medical/Dental/Vision
- Premiums are 100% Company Paid
- Health Savings Account Life Insurance
- Disability Insurance Financial:
- 401k Retirement Plan
- Home Office Budget Leave:
- We offer all full-time Unicorns Flexible Time Off (FTO) plus all Federal Holidays, one week for Thanksgiving, and two weeks for Christmas and New Year’s
- Paid Parental Leave Learning:
Additional details
- EMPLOYER IS A CONTRACTOR FOR THE U.S. GOVERNMENT. THIS POSITION WILL REQUIRE U.S. CITIZENSHIP. Role Description:
- As a cybersecurity SME within Delivery at Defense Unicorns, you will be responsible for owning all aspects of the RMF process from accreditation of the platform for our mission heroes.
- You will be expected to champion modern, continuous security implementations within DoD environments and systems (approval processes).
- Your perpetual goal will be to accelerate the FedRamp and ATO process while simultaneously improving our security posture, thus pushing for cultural change away from security theater and towards responsive and resilient systems.
- Leading and pathfinding the effort to achieve accreditation in accordance with NIST-800 series requirements.
- Developing and implementing cybersecurity policies, procedures, and controls necessary to meet FedRamp and DoD accreditation standards .
- Conducting comprehensive risk assessments and vulnerability analyses to identify potential security threats and mitigate risks.
- Collaborating with cross-functional teams including software developers, system architects, and other Government stakeholders to integrate cybersecurity measures into the software development lifecycle.
- Performing security testing and evaluation of our software platform to identify vulnerabilities and weaknesses (STIGs, ACAS, CI/CD security testing, etc.)
- Providing guidance and support to ensure continuous monitoring and maintenance of cybersecurity controls.