Key responsibilities:

• Identify, assess, and prioritize vulnerabilities and risks across applications, networks, endpoints, cloud environments, and enterprise systems
• Collaborate with ISSOs and Controls Assessors to capture RMF artifacts and validate security control effectiveness
• Coordinate with Engineers to develop and design secure systems that are positioned to quickly and easily achieve FISMA accreditation
• Review, advise, and refine security Control Statements to ensure systems are hardened and accurately represented in assessment documentation
• Drive compliance with federal regulations and policies, such as NIST special publications, OMB publications, and Binding Operational Directives (BODs)
• Drive engineering best practices and secure practices, to include those processes establishing configuration, hardening, and risk reduction
• Identify risks, assess those risks, and provide remediation guidance
• Communicate risks clearly to stakeholders and recommend effective mitigation strategies
• Contribute to the continuous improvement of security processes and controls

Here’s what you need:

• 4–6 years of experience performing security engineering or secure engineering
• Strong understanding of the FISMA Risk Management Framework (RMF)
• Experience hardening applications and operating systems
• Understanding of OS‑level vulnerabilities and hardening practices
• Understanding of core network protocols and components (TCP/IP, DNS, firewalls, routers, switches)
• Experience configuring and working with Identity Providers (IdP)
• Experience with patch management tools and processes
• Ability to identify, assess, and mitigate risks
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)

Bonus:

• Strong experience working with Cloud Service Providers (AWS, Azure, GCP) and cloud‑native policies

Eligibility requirements:

• U.S. Citizenship required
• Eligible to obtain a Public Trust security clearance