ANR - Information Systems Security Engineer

Accountabilities:: Apply systems security engineering best practices throughout software and system lifecycles, incorporating secure design, secure architecture, secure coding, and security controls aligned with NIST SP 800-160 Volume 1 and applicable Air Force guidance. Capture, refine, and manage information security requirements while ensuring technical requirements are integrated into system baselines, DevSecOps pipelines, and System Requirements Documents. Coordinate security engineering activities with Program Managers, Information System Owners, Information System Security Managers, Information System Security Officers, and other relevant stakeholders. Support Risk Management Framework activities by helping answer security controls, develop required artifacts, and contribute to Authority to Operate submissions. Execute gap analyses and technical evaluations in support of approved Information System Continuous Monitoring strategies. Conduct risk analysis and contribute to the advancement of Zero Trust Architecture maturity across supported systems. Support security incident remediation by performing technical root-cause evaluations and developing corrective action plans and mitigations for vulnerabilities and Plan of Action and Milestones items. Develop and implement security policies and procedures that ensure systems meet organizational business requirements and mission-system needs. Support the assessment, implementation, and integration of security tools and controls across cloud and enterprise environments. Contribute to secure cloud and DevSecOps initiatives, including security integration within CI/CD pipelines and automation workflows where applicable. Collaborate with technical and operational stakeholders to identify security gaps, communicate risks, and drive appropriate remediation actions. Maintain clear and accurate security documentation and technical artifacts throughout system authorization and continuous monitoring activities. Requirements U.S. citizenship is required. Bachelor’s degree from an accredited institution in Computer Science, Information Technology, or a related field. Active DoD Secret clearance or higher . DoD 8140 or 8570 equivalent IAT Level III certification(s) . At least 2 years of experience as an Information System Security Manager, Information System Security Officer, or equivalent role, or 10+ years of cybersecurity industry experience including at least 3 years implementing or developing security policies or controls within DoD systems. Experience supporting ISSM and ISSO functions, including answering RMF controls and preparing artifacts for ATO submissions. Demonstrated experience with Risk Management Framework (RMF), eMASS, ACAS, and Air Force Assessment & Authorization processes . At least 1 year of professional experience working with cloud service providers such as AWS, Azure, GCP, OCI, or comparable platforms. Experience developing and implementing security policies and procedures that align systems with business requirements and mission needs. Strong communication and interpersonal skills, with the ability to work effectively across technical, security, program, and leadership stakeholders. Strong analytical and problem-solving capabilities, with sound judgment when evaluating security risks and technical trade-offs. Professional experience with CI/CD pipelines and automation is preferred. Experience integrating security tools and resources within cloud environments based on client requirements is preferred. Experience with DevSecOps practices is desirable. Experience securing Azure Kubernetes Service (AKS) environments is a plus. Experience with UiPath Automation Suite and Studio products is a plus. Benefits $120,000–$180,000 salary range , with final compensation influenced by responsibilities, education, experience, skills, internal equity, market data, and other applicable factors. Fully remote position for U.S.-based workers. Full-time contract employment. Competitive benefits package. Challenging technical assignments supporting mission-critical systems. Opportunities for career growth and professional advancement. Hands-on exposure to DoD cybersecurity, RMF, A&A, continuous monitoring, Zero Trust, cloud security, and DevSecOps. Opportunity to work on complex security engineering initiatives involving enterprise and mission systems. Collaboration with security, engineering, program, and operational stakeholders across a technically demanding environment. Professional environment emphasizing accountability, collaboration, excellence, and continuous development.