Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$153к$170кмедиана$220к
49 в выборке
На СНГ рынке: $5.1к/мес ($3.2к - $7.9к)
79
Хорошая вакансия
развернуть
Обязанности описаны понятно, а работа связана с облачной безопасностью для проектов DoD, но строгие требования к допуску и офисному присутствию заметно сужают круг тех, кому доступна эта вакансия.
Кликните для подробной информации
Жёсткие требования к допускуТолько офисСовременная кибербезопасностьПонятные обязанностиПоддержка обучения
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cybersecurity Engineer (ISSO) (RMF/DevSecOps): Implementing cybersecurity, Risk Management Framework activities, and continuous monitoring for Department of Defense software factories and enterprise cloud environments with an accent on classified systems, vulnerability management, and compliance documentation. Focus on securing cloud-native capabilities, Kubernetes/OpenShift and container environments, Zero Trust controls, and Continuous Authority to Operate activities.
Location: Full-time on-site in San Antonio, Texas, United States; support classified Unclassified, Secret, and SCI environments.
Company
hirify.global provides intelligence and military solutions, including cybersecurity support for Department of Defense software factories and enterprise cloud environments.
What you will do
Execute Risk Management Framework activities for system authorization, continuous monitoring, and Continuous Authority to Operate.
Maintain SSPs, POA&Ms, SARs, hardware and software inventories, audit evidence, security artifacts, reports, and cybersecurity metrics.
Support security control assessments, penetration testing, Authorizing Official reviews, annual inspections, audits, and operational readiness activities.
Monitor cybersecurity posture, manage vulnerabilities, implement DISA STIGs, validate configuration compliance, and coordinate remediation.
Support Zero Trust security, cloud security controls, Kubernetes/OpenShift security, container hardening, and DevSecOps practices.
Collaborate with Government leadership, ISSMs, ISSOs, ISSEs, Cyber Operations Teams, Cyber Penetration Teams, Product Owners, developers, cloud engineers, and DevSecOps engineers.
Requirements
U.S. citizenship and TS/SCI clearance held within the last 2 years, plus a CI Polygraph within the last 5 years.
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, Information Systems, or a related technical field.
Security+, CySA+, CASP+, or equivalent DoD 8140 certification.
Nine or more years supporting Department of Defense cybersecurity missions and RMF implementation and cybersecurity compliance activities.
Experience maintaining SSPs, POA&Ms, SARs, and other RMF documentation.
Experience with vulnerability management, STIG implementation, continuous monitoring, cybersecurity compliance tools, and vulnerability management tools.
Experience supporting Agile or SAFe software development environments, DevSecOps, or enterprise cloud environments.
Working knowledge of NIST RMF, NIST SP 800-53, CNSSI guidance, DoD cybersecurity policy, and DISA STIGs.
Excellent written and verbal communication skills.
Nice to have
TS/SCI clearance with CI Polygraph.
Advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or a related field.
CISSP, CAP, or Certified Cloud Security Professional certification.
Ten or more years supporting Department of Defense cybersecurity missions.
Experience supporting software factories, Kubernetes, OpenShift, Iron Bank, hardened container environments, cATO, Zero Trust security controls, enterprise DevSecOps pipelines, IL4/IL5/IL6 cloud environments, Cyber Operations Teams, Cyber Penetration Teams, multiple military services, and Combatant Commands.
Culture & Benefits
Generous medical insurance cost sharing for employees and dependents.
Company-paid dental, vision, short-term disability, and long-term disability insurance.
401(k) plan with a generous match and immediate vesting.
Paid leave and holiday package.
Tuition and training reimbursement, plus life and AD&D insurance.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →