7 days ago
Huntsville, AL, USAMid Level
Responsibilities
- Perform ISSO duties and maintain assigned systems’ security posture throughout the RMF lifecycle.
- Develop and maintain System Security Plans, POA&Ms, risk assessments, incident response plans, and other authorization artifacts.
- Implement and validate security controls and support assessors through the authorization process.
- Conduct vulnerability scanning, audit-log reviews, STIG compliance checks, and remediation tracking.
- Harden Linux, Windows, applications, and network components to STIG and SRG baselines.
- Collaborate with DevSecOps engineers to integrate security tooling into CI/CD pipelines and translate control requirements into technical solutions.
- Apply containerization, Infrastructure-as-Code, and scripting to automate compliance evidence collection.
- Investigate and document security incidents and report findings to leadership and stakeholders.
- Monitor emerging threats and cybersecurity policy changes and recommend security improvements.
Requirements
- U.S. citizenship and an active security clearance of at least Secret are required.
- At least 3 years of cybersecurity experience, including hands-on ISSO or equivalent information assurance work, is required.
- Working knowledge of the Risk Management Framework and NIST SP 800-53 security controls is required.
- Experience preparing and maintaining authorization packages, including SSPs and POA&Ms, is required.
- Experience with vulnerability scanning and compliance tools such as ACAS/Nessus, SCAP Compliance Checker, or STIG Viewer is required.
- Hands-on Linux or Windows hardening experience is required.
- Strong written communication skills for security documentation and reporting are required.
- Applicants must have DoD 8140/8570 IAT Level II certification, such as CompTIA Security+, or be able to obtain it within 6 months of hire.
- Interest in learning DevOps tools and practices and motivation to build those skills on the job are required.
- Preferred qualifications include eMASS or similar GRC platform experience, CI/CD exposure, container or orchestration experience, Bash/Python/PowerShell scripting, AWS or Azure familiarity, SIEM experience with Splunk or Elastic, zero trust familiarity, and CISSP, CISM, or CASP+ certification.
Benefits
- Competitive pay and comprehensive benefits are offered, with opportunities intended to match employees’ lives and support career growth.
Tech Stack
Categories
About Zadentech
Zaden Technologies builds AI and cloud products for secure software delivery in regulated environments, including Olympus (secure software factory), Icarus (MBSE), Vulcan (AI code modernization), and Heimdall (cyber analytics). It also provides services in software modernization, digital transformation, and AI/ML for aerospace and defense, automotive, finance, healthcare, public sector, and critical infrastructure clients. Founded in 2019, the company is privately held and headquartered in Huntsville, Alabama.