Skyward IT Solutions

Security Engineer

Rockville, MD · Contract

No sponsorship$120k-$160kDetected 36 days ago

PythonBashAWSCI/CDNLPLLMsCybersecurityZero TrustProblem Solving

About the role

That is, a love for people, for improvement, for human advancement through information technology.
Integrity: We're conscientious, intentional, and empathetic.
Please don't ask us to play another part, we're poor actors.

Find and prioritize what matters. Run vulnerability and security scans, then build a clear, prioritized list of weaknesses based on severity, known exploitation, and exploitation probability using intelligence sources like the CISA KEV catalog and EPSS.
Build and feed continuous monitoring. Implement monitoring of production runtime environments for vulnerabilities and compliance drift, and make security and compliance reporting available on demand.
Track and close the gaps. Document vulnerabilities, misconfigurations, and compliance deviations, and support POA&M creation and remediation tracking to keep system ATOs healthy.
Keep us aligned to the standards. Support compliance with CMS and federal requirements such as NIST RMF, ARS, and IS2P2 within a FISMA Moderate boundary.
Harden access. Help implement least-privilege, role-based access controls aligned to Zero Trust objectives and support regular access reviews and audits.
Raise the flag early. Identify, document, and communicate security risks tied to modernization efforts so they get to the right stakeholders before they become problems.
Solid problem-solving skills and the ability to collaborate across multiple stakeholders.

A bachelor's degree in computer science, information systems, cybersecurity, or a related field.
3-5 years of experience in security engineering, cybersecurity, or a related role.
Hands-on experience with vulnerability scanning and management tools (e.g., Tenable, AWS Inspector, Snyk, Trufflehog, or GitLeaks).
Working knowledge of AWS security and compliance services (Security Hub, Config, Audit Manager) or comparable cloud-native tooling.
Familiarity with security compliance and the Authority to Operate (ATO) process, including POA&Ms and continuous monitoring.
Comfort scripting and automating in Python or Bash and integrating tooling into CI/CD pipelines.

We are Skyward.
We are a people-centered business with a desire to serve others.
We are diverse and unified; creative and collaborative; a collection of complementary, not competing talents.
And though on the surface we remain relaxed, beneath, a torrent of energy links us to our civic tech mission.
We stand by our values, and we won't compromise on any of them.
For us, life isn't what happens outside of work.
Work happens inside of life and our culture erases the line often dividing the two.
At Skyward, we're focused on hiring individuals with the right skills and passion to grow, not just checking off every box.
What we offer you:

Applicants must have the ability to obtain and maintain a Public Trust security clearance due to the nature of our work as a government contractor

This listing is sourced directly from Skyward IT Solutions's careers page and normalized into a canonical job model.