Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$129к$143кмедиана$170к
50 в выборке
На СНГ рынке: $5.1к/мес ($3.2к - $7.9к)
84
Хорошая вакансия
развернуть
Обязанности понятны, работа связана с защищёнными оборонными системами, а график 9/80 даёт дополнительный выходной через неделю. При этом обязательный действующий допуск и работа только в офисе заметно ограничивают доступность вакансии.
Senior Specialist, Information Security Systems Engineering (Cybersecurity/Defense): Applying security controls and architecture requirements to high-assurance defense systems with an accent on RMF activities, STIG validation, and security evidence development. Focus on integrating security across software, networking, FPGA, and hardware engineering, supporting authorization efforts, and tracking compliance risks.
Location: Salt Lake City, Utah, US; onsite role
Company
hirify.global develops defense technology and end-to-end solutions across space, air, land, sea, and cyber domains for national security missions.
What you will do
Provide security architecture and requirements oversight for high-assurance defense systems.
Interpret NIST SP 800-53, CNSSI 1253, and related guidance into implementable engineering requirements.
Support STIG and configuration-baseline implementation and validation.
Execute RMF activities, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, maintain, and review RMF documentation, including SSPs, SARs, POA&Ms, and security plans.
Review software, networking, and hardware designs; coordinate with engineers, Authorizing Officials, assessors, and program leadership on authorization, compliance, risks, and remediation.
Requirements
Bachelor’s degree in engineering, cybersecurity, computer science, information systems, or a related discipline with at least 6 years of relevant experience; or a related graduate degree with 4 years of relevant experience; or 10 years of relevant experience in lieu of a degree.
Active Secret security clearance required.
Security-clearance eligibility is limited to U.S. citizens.
Experience with security engineering requirements analysis, design, and testing.
Experience applying NIST SP 800-53 controls, STIGs, and RMF processes, preferably in DoD environments.
Experience with high-assurance or classified systems, security authorization or ATO processes, and technical documentation.
Understanding of networking concepts, including TCP/IP, network architecture, and boundary defense.
Ability to work across software, networking, FPGA, and hardware engineering teams.
Nice to have
Exposure to cryptographic systems, FIPS 140-3, NSA certification processes, embedded or communications systems, DevSecOps, TEMPEST, Anti-Tamper, or related system-security disciplines.
Experience supporting government customers in a SETA/A&AS role or working in cross-functional engineering teams.
Additional certifications such as CISM, CISSP-ISSEP, CISA, CEH, or GIAC.
DoD 8140/8570-compliant certification such as Security+, CISSP, SSCP, or GSEC, or ability to obtain one within 6 months of hire.
Culture & Benefits
Inclusive, engaging workplace focused on professional growth, community commitment, and work-life success.
9/80 schedule: 80 hours over 9 of every 14 days, with every other Friday off.
Travel of up to 10% as needed.
Pre-employment background checks and substance-abuse testing may apply where permitted by law.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →