Information Security Engineer

Job Description:

• Support DSOP platform-wide cybersecurity requirements
• Ensure secure configuration, continuous monitoring, vulnerability management, and compliance across DSOP environments
• Conduct container and Kubernetes security assessments
• Develop hardened configurations and STIG-aligned baselines
• Build and maintain security controls for container registries, images, and pipelines
• Perform vulnerability scanning, remediation tracking, and reporting
• Support RMF accreditation, continuous monitoring, and security engineering tasks
• Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
• Implement zero-trust security patterns and secure deployment workflows
• Manage secrets, certificate rotation, and identity enforcement

Requirements:

• Minimum of an active DoW Secret security clearance; candidates without at least a Secret clearance will not be considered
• 8–10+ years of cybersecurity or security engineering experience
• Expertise with Kubernetes security, container scanning tools, and image hardening is mandatory
• Bachelor’s Degree in Computer Science, Engineering, or another technical discipline with an Information Security or Cyber Security concentration, or an advanced degree with an Information Security or Cyber Security concentration, preferred; alternatively, 4+ additional years of equivalent professional work experience
• Familiarity with DoD STIGs, RMF, ACAS, Nessus, and OpenSCAP
• Experience supporting secure cloud or platform environments
• Security certifications such as Security+, CEH, CISSP, or CCSK preferred
• Must be U.S.-based

Benefits:

• Remote work arrangement
• Eastern Standard Time working hours (8 am to 5 pm)