ANR - Information Systems Security Engineer

Accountabilities:

• Apply systems security engineering best practices throughout software and system lifecycles, incorporating secure design, secure architecture, secure coding, and security controls aligned with NIST SP 800-160 Volume 1 and applicable Air Force guidance.
• Capture, refine, and manage information security requirements while ensuring technical requirements are integrated into system baselines, DevSecOps pipelines, and System Requirements Documents.
• Coordinate security engineering activities with Program Managers, Information System Owners, Information System Security Managers, Information System Security Officers, and other relevant stakeholders.
• Support Risk Management Framework activities by helping answer security controls, develop required artifacts, and contribute to Authority to Operate submissions.
• Execute gap analyses and technical evaluations in support of approved Information System Continuous Monitoring strategies.
• Conduct risk analysis and contribute to the advancement of Zero Trust Architecture maturity across supported systems.
• Support security incident remediation by performing technical root-cause evaluations and developing corrective action plans and mitigations for vulnerabilities and Plan of Action and Milestones items.
• Develop and implement security policies and procedures that ensure systems meet organizational business requirements and mission-system needs.
• Support the assessment, implementation, and integration of security tools and controls across cloud and enterprise environments.
• Contribute to secure cloud and DevSecOps initiatives, including security integration within CI/CD pipelines and automation workflows where applicable.
• Collaborate with technical and operational stakeholders to identify security gaps, communicate risks, and drive appropriate remediation actions.
• Maintain clear and accurate security documentation and technical artifacts throughout system authorization and continuous monitoring activities.

Requirements

• U.S. citizenship is required.
• Bachelor’s degree from an accredited institution in Computer Science, Information Technology, or a related field.
• Active DoD Secret clearance or higher.
• DoD 8140 or 8570 equivalent IAT Level III certification(s).
• At least 2 years of experience as an Information System Security Manager, Information System Security Officer, or equivalent role, or 10+ years of cybersecurity industry experience including at least 3 years implementing or developing security policies or controls within DoD systems.
• Experience supporting ISSM and ISSO functions, including answering RMF controls and preparing artifacts for ATO submissions.
• Demonstrated experience with Risk Management Framework (RMF), eMASS, ACAS, and Air Force Assessment & Authorization processes.
• At least 1 year of professional experience working with cloud service providers such as AWS, Azure, GCP, OCI, or comparable platforms.
• Experience developing and implementing security policies and procedures that align systems with business requirements and mission needs.
• Strong communication and interpersonal skills, with the ability to work effectively across technical, security, program, and leadership stakeholders.
• Strong analytical and problem-solving capabilities, with sound judgment when evaluating security risks and technical trade-offs.
• Professional experience with CI/CD pipelines and automation is preferred.
• Experience integrating security tools and resources within cloud environments based on client requirements is preferred.
• Experience with DevSecOps practices is desirable.
• Experience securing Azure Kubernetes Service (AKS) environments is a plus.
• Experience with UiPath Automation Suite and Studio products is a plus.

Benefits

• $120,000–$180,000 salary range, with final compensation influenced by responsibilities, education, experience, skills, internal equity, market data, and other applicable factors.
• Fully remote position for U.S.-based workers.
• Full-time contract employment.
• Competitive benefits package.
• Challenging technical assignments supporting mission-critical systems.
• Opportunities for career growth and professional advancement.
• Hands-on exposure to DoD cybersecurity, RMF, A&A, continuous monitoring, Zero Trust, cloud security, and DevSecOps.
• Opportunity to work on complex security engineering initiatives involving enterprise and mission systems.
• Collaboration with security, engineering, program, and operational stakeholders across a technically demanding environment.
• Professional environment emphasizing accountability, collaboration, excellence, and continuous development.