Defense Unicorns
Cybersecurity Engineer
United States - Remote · Contract
No sponsorship$53k-$800kDetected 34 days ago
AWSGCPAzureCloud PlatformsKubernetesTerraformHelmCI/CDCybersecurityComplianceRecruitingCommunicationProblem Solving
About the role
- As the cybersecurity engineer, you will be responsible for supporting all aspects of the RMF process from accreditation of the platform to establish a cATO for our Software Factory implementation.
- You will be expected to champion modern, continuous security implementations within DoD environments and systems (approval processes).
- Your perpetual goal will be to accelerate the ATO process while simultaneously improving our security posture, thus pushing for cultural change away from security theater and towards responsive and resilient systems.
Responsibilities
- Developing and implementing cybersecurity policies, procedures, and controls necessary to meet DoD accreditation standards.
- Performing security testing and evaluation of our software platform to identify vulnerabilities and weaknesses (STIGs, ACAS, CI/CD security testing, etc.) ● Providing guidance and support to ensure continuous monitoring and maintenance of cybersecurity controls.
- Experience building and supporting continuous authority to operate (cATO) packages within the DoD
- Ability to use OSCAL to manage control implementation and statements as "compliance as code"
- Building and improving security delivery
- Building Kubernetes and cloud native applications
Requirements
- Proven experience in cybersecurity engineering, with a focus on achieving accreditation for software systems within the DoD environment.
- In-depth knowledge of NIST-800 series standards, particularly NIST-800-53, and experience applying these standards to achieve accreditation.
- Familiarity with software development methodologies and practices, particularly Agile and DevSecOps.
- Excellent analytical and problem-solving skills, with the ability to assess complex systems and identify security risks.
- Experience with Open Security Controls Assessment Language (OSCAL)
- Familiarity with Department of the Air Force (DAF) security approval processes to include AFI 17-101
- Familiarity with DAF Gov Cloud offerings and inherited controls in Gov Cloud environments
- Familiarity with the Cloud Computing Security Requirements Guide (CC SRG)
- Skilled at translating technical implementation (infrastructure as code and configuration as code) into verifiable eMASS security control responses that Approving Officials (AOs), and their staffs, can understand.
- Strong understanding of cybersecurity principles, technologies, and best practices, including encryption, authentication, access control, and secure coding practices. ● Hands-on experience with security assessment tools and techniques, such as vulnerability scanning and security analysis.
- Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders.
- Eligibility to obtain and maintain a DoD security clearance.
- Eligibility to obtain and maintain privileged access in a Government Cloud Environment (relevant training and/or certifications).
Nice to have
- Conferences (travel, lodging, and fees)
- Preferred Experience and Qualifications:
- Preferred Experience and
Compensation
- ranges are established using national benchmarking data and apply across all geographic locations within the United States.
Benefits
- Medical/Dental/Vision
- Health Savings Account
- Life Insurance
- Disability Insurance
- 401k Retirement Plan
- Company Stock Options
- Home Office Budget
- We offer all full-time Unicorns Flexible Time Off (FTO) plus all Federal Holidays, one week for Thanksgiving, and two weeks for Christmas and New Year's
- Paid Parental Leave
Company info
- Kubernetes
- Cloud Environments (AWS/GCP and Azure)
- Infrastructure-as-code (like Terraform/Pulumi)
- Continuous Delivery and automation tooling
- GitOps
- Containers
- CNCF projects and open source products and packages
- Helm/Kustomize-Value Stream Mapping
- Defense Unicorns delivers mission value by streamlining software delivery so our customers can focus on the most important challenges.
- We share a vision of freedom and security for the advancement of progress and innovation.
- Our commitment to this vision, and to our mission-driven customers, means a commitment to speed, user experience and optionality, without compromising security.
- Our team is composed of innovators, software engineers, and veterans with decades of experience delivering technology programs across the federal market.
- We create and deliver secure solutions for continuous software integration and delivery.
Apply directly at Defense Unicorns →Create a free account for alerts like thisView Defense Unicorns immigration profile
This listing is sourced directly from Defense Unicorns's careers page and normalized into a canonical job model.