Information System Security Engineer (Cybersecurity)

Location: Torrance, California, United States; full-time onsite presence required. Occasional travel and extended hours, including evenings and weekends, may be required.

Company

hirify.global develops and delivers advanced defense systems and provides classified engineering environments for product development and testing.

What you will do

• Harden Windows, RHEL, virtualization platforms, and network infrastructure using DISA STIGs, access controls, and network segmentation.
• Configure SIEM, endpoint protection, and centralized logging; integrate sources, tune alerts, verify collection health, and support incident investigation, containment, and recovery.
• Assess vulnerabilities and configurations, prioritize and remediate findings, document residual risks, and maintain security tools and offline updates.
• Support ISSM and ISSO activities under the RMF, including ATO authorization, configuration records, scan results, control evidence, assessments, and POA&Ms.
• Review software, dependencies, third-party packages, and container images before introduction into classified systems; automate security checks and maintain procedures and change records.
• Perform privileged administration and troubleshoot security configurations while explaining technical risks and fixes to security and IT teams.

Requirements

• Hands-on experience supporting classified information systems within approved security boundaries and controlled change processes.
• Experience securing Windows and Linux systems, including authentication, permissions, auditing, services, Active Directory, and Group Policy.
• Experience with network segmentation, firewall or access-control rules, secure management interfaces, and restricting unnecessary ports, protocols, and services.
• Practical experience applying DISA STIGs, performing automated and manual configuration checks, documenting findings, and verifying corrective actions.
• Experience configuring or maintaining SIEM, endpoint protection, and vulnerability-assessment tools, including log collection, alert tuning, agent health, update management, and remediation verification.
• Experience supporting ISSM/ISSO authorization activities, security-control evidence, assessment preparation, and RMF finding closure.
• Experience with privileged administration on secure or classified systems, including account management, access controls, audit logging, and documented configuration changes.
• Must possess and maintain a current cybersecurity certification accepted for the assigned DoD Cyber Workforce Framework work role and proficiency level, and meet applicable DoD 8140.03 and program qualification requirements.
• U.S. citizenship and an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance are required. Applicable program-access requirements, privileged-user training, and system-specific authorizations must be completed.
• Ability to lift and move equipment weighing at least 40 pounds, with or without reasonable accommodation.

Nice to have

• Experience maintaining air-gapped systems, approved media transfers, offline patches, security-content updates, and local software repositories.
• Experience with Splunk or Elastic Security, rsyslog, Windows event forwarding, Trellix, ePO, DLP, Nessus/Tenable, SCAP, or STIG Viewer.
• Experience securing VMware vSphere/ESXi, Microsoft Hyper-V, storage and backup services, and Juniper or comparable network infrastructure.
• Experience with PowerShell, Bash, Python, or Ansible for configuration checks, evidence collection, or remediation.
• Experience with eMASS, NIST controls, DCSA requirements, JSIG, or comparable authorization-documentation processes.
• Experience reviewing software dependencies, container images, software bills of materials, Trivy, Anchore, and on-premises source-control or build/release workflows such as GitHub Enterprise Server.

Culture & Benefits

• Early-stage environment emphasizing focus, ownership, execution, and measurable impact.
• Full-time employees receive long-term equity, four weeks of paid time off, ten company-paid holidays, comprehensive medical, dental, and vision coverage, and paid parental leave.
• Benefits include a $100 monthly fitness stipend, onsite EV charging, catered meals, company-covered food during high-demand periods, and a stocked kitchen.
• Full-time onsite work is required, with occasional travel and additional hours during aggressive timelines.

Hiring process

• Employment is contingent on meeting applicable U.S. Government clearance, citizenship, program-access, and export-control eligibility requirements.
• Access to export-controlled information requires the ability to obtain access without additional export licensing from BIS or DDTC.