19 days ago
Remote, United StatesSenior / Staff+
Base Salary
$150k - $203k/yr
Responsibilities
- Automate security evidence generation and map RMF controls to support continuous authorization.
- Author control implementations and bodies of evidence, including documenting controls inherited from the software factory.
- Conduct security audits and risk analyses and plan and implement remediations.
- Translate security and compliance requirements into practical engineering choices.
- Build trust with security reviewers and authorizing officials and clearly explain technical tradeoffs.
- Pair with and coach government teams so they can sustain security practices after the engagement.
Requirements
- Identify application vulnerabilities and risks through continual review and enumeration.
- Proactively work with teams to build secure and compliant systems and mitigate risks.
- Have familiarity with common vulnerability information sources and regulatory security and compliance requirements.
- Have experience taking systems through RMF and ATO, ideally in a DoD environment, including authoring control implementations and bodies of evidence.
- Have experience automating security evidence generation or mapping controls under RMF.
- Write clean, working, reusable code in at least one programming language.
- Have experience working on cross-functional teams involving product, design, engineering, and operations in iterative delivery.
- Have experience with continuous ATO, eMASS, and POA&M management.
- Have experience documenting inherited controls from Cloud One, MDaaS, Platform One, or a similar cloud platform or DoD software factory.
- Have experience with compliance as code, GitLab CI, Checkmarx or similar static code scanning, and SBOM generation.
- Have experience with cloud infrastructure and infrastructure as code.
- Be able to work on remote teams and align with the company’s values.
- Be a U.S. citizen, able to obtain a Common Access Card and any required special access, and successfully complete a company background check.
Benefits
- Fully remote work within the U.S., excluding U.S. territories, with occasional travel to Montgomery, Alabama, and other U.S. Air Force bases.
- Full-time, exempt employment targeted to start November 30, 2026, pending contract award.
- Medical, dental, vision, disability, life, and AD&D insurance.
- Dependent care FSA, healthcare FSA, and health savings account.
- Dollar-for-dollar 401(k) matching up to 10% of salary with no vesting period.
- Flexible paid time off generally around 25 days per year plus 11 paid federal holidays.
- Up to 12 weeks of paid time off for eligible new birth, adoption, or foster parents.
- Performance rewards, annual bonuses, spot bonuses, stock options, business development and sales bonuses, and referral bonuses.
- Annual $2,000 professional development allowance, $750 tech-related purchase allowance, and $100 swag budget.
- Flexible, remote-friendly work environment.
Tech Stack
GitLab CI/CD