About the role

What you’ll do

• Own end-to-end security engineering and architecture for a portfolio of classified national security systems
• Lead Risk Management Framework (RMF) activities and authorization evidence
• Drive continuous monitoring and guide security risk decisions
• Mentor security practitioners and support engineering teams
• Apply threat modeling and other risk identification techniques
• Develop metrics connecting security activity to risk reduction and authorization health

What you’ll need

• Active Top Secret clearance with SCI access
• 10+ years of relevant experience, including technical leadership as a senior ISSE, security architect, ISSM, lead ISSO, security control assessor, or equivalent supporting high-impact national security missions
• 4+ years of non-internship experience troubleshooting systems, analyzing logs, automating complex tasks with command-line tools, and scripting, programming, and security code review in common languages
• Knowledge of at least two of Scala, Java, Python, C/C++, or Go; proficiency in Python, PowerShell, Bash, or another scripting language
• Advanced knowledge in at least two security domains, such as cloud security, zero trust, identity, secure networking, detection engineering, software security, or incident response, with experience applying threat modeling or risk identification
• Experience securing AWS or another major cloud platform in regulated or isolated environments, plus relevant certifications such as CISSP, CGRC, SecurityX, CCSP, CISM, or GIAC

Original job description