This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a ANR - Information Systems Security Engineer based in United States.
This role focuses on securing mission-critical systems throughout their design, authorization, implementation, and continuous monitoring lifecycles.
You will apply systems security engineering and cybersecurity principles to strengthen architectures, controls, requirements, and secure development practices.
The position works closely with security, program, system ownership, and authorization stakeholders supporting Department of Defense environments.
You will contribute to Risk Management Framework activities, Authority to Operate submissions, continuous monitoring, and Zero Trust maturity.
The role combines technical engineering with requirements analysis, risk assessment, vulnerability remediation, and security documentation.
You will operate in a fully remote environment while supporting complex cloud, DevSecOps, and mission-system security initiatives.
This opportunity offers significant technical responsibility within a defense-focused cybersecurity environment, with competitive compensation and career growth potential.
Accountabilities:
- Apply systems security engineering best practices throughout software and system lifecycles, incorporating secure design, secure architecture, secure coding, and security controls aligned with NIST SP 800-160 Volume 1 and applicable Air Force guidance.
- Capture, refine, and manage information security requirements while ensuring technical requirements are integrated into system baselines, DevSecOps pipelines, and System Requirements Documents.
- Coordinate security engineering activities with Program Managers, Information System Owners, Information System Security Managers, Information System Security Officers, and other relevant stakeholders.
- Support Risk Management Framework activities by helping answer security controls, develop required artifacts, and contribute to Authority to Operate submissions.
- Execute gap analyses and technical evaluations in support of approved Information System Continuous Monitoring strategies.
- Conduct risk analysis and contribute to the advancement of Zero Trust Architecture maturity across supported systems.
- Support security incident remediation by performing technical root-cause evaluations and developing corrective action plans and mitigations for vulnerabilities and Plan of Action and Milestones items.
- Develop and implement security policies and procedures that ensure systems meet organizational business requirements and mission-system needs.
- Support the assessment, implementation, and integration of security tools and controls across cloud and enterprise environments.
- Contribute to secure cloud and DevSecOps initiatives, including security integration within CI/CD pipelines and automation workflows where applicable.
- Collaborate with technical and operational stakeholders to identify security gaps, communicate risks, and drive appropriate remediation actions.
- Maintain clear and accurate security documentation and technical artifacts throughout system authorization and continuous monitoring activities.
Requirements
- U.S. citizenship is required.
- Bachelor’s degree from an accredited institution in Computer Science, Information Technology, or a related field.
- Active DoD Secret clearance or higher.
- DoD 8140 or 8570 equivalent IAT Level III certification(s).
- At least 2 years of experience as an Information System Security Manager, Information System Security Officer, or equivalent role, or 10+ years of cybersecurity industry experience including at least 3 years implementing or developing security policies or controls within DoD systems.
- Experience supporting ISSM and ISSO functions, including answering RMF controls and preparing artifacts for ATO submissions.
- Demonstrated experience with Risk Management Framework (RMF), eMASS, ACAS, and Air Force Assessment & Authorization processes.
- At least 1 year of professional experience working with cloud service providers such as AWS, Azure, GCP, OCI, or comparable platforms.
- Experience developing and implementing security policies and procedures that align systems with business requirements and mission needs.
- Strong communication and interpersonal skills, with the ability to work effectively across technical, security, program, and leadership stakeholders.
- Strong analytical and problem-solving capabilities, with sound judgment when evaluating security risks and technical trade-offs.
- Professional experience with CI/CD pipelines and automation is preferred.
- Experience integrating security tools and resources within cloud environments based on client requirements is preferred.
- Experience with DevSecOps practices is desirable.
- Experience securing Azure Kubernetes Service (AKS) environments is a plus.
- Experience with UiPath Automation Suite and Studio products is a plus.
Benefits
- $120,000–$180,000 salary range, with final compensation influenced by responsibilities, education, experience, skills, internal equity, market data, and other applicable factors.
- Fully remote position for U.S.-based workers.
- Full-time contract employment.
- Competitive benefits package.
- Challenging technical assignments supporting mission-critical systems.
- Opportunities for career growth and professional advancement.
- Hands-on exposure to DoD cybersecurity, RMF, A&A, continuous monitoring, Zero Trust, cloud security, and DevSecOps.
- Opportunity to work on complex security engineering initiatives involving enterprise and mission systems.
- Collaboration with security, engineering, program, and operational stakeholders across a technically demanding environment.
- Professional environment emphasizing accountability, collaboration, excellence, and continuous development.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1