Cybersecurity Engineer

Zaden Tech•Huntsville, AL

47d

About The Position

Zaden Technologies is seeking a Cybersecurity Engineer with a strong ISSO background who is interested in developing DevOps security skills. The role is responsible for securing and maintaining authorization of supported systems through RMF package management, continuous monitoring, environment hardening, and vulnerability remediation. The engineer will collaborate with DevSecOps engineers to learn how security is integrated into pipelines, containers, and cloud infrastructure, and help automate manual compliance work.

Requirements

U.S. citizenship and an active security clearance at a minimum of Secret.
At least 3 years of cybersecurity experience, including hands-on work as an ISSO or in an equivalent information assurance role.
Working knowledge of the Risk Management Framework (RMF) and NIST SP 800-53 security controls.
Experience preparing and maintaining authorization packages, including SSPs and POA&Ms.
Experience with vulnerability scanning and compliance tools such as ACAS/Nessus, SCAP Compliance Checker, or STIG Viewer.
Hands-on experience hardening Linux or Windows systems.
Strong written communication skills for security documentation and reporting.
Genuine interest in learning DevOps tools and practices and motivation to build those skills on the job.
DoD 8140/8570 IAT Level II certification (e.g., CompTIA Security+) or ability to obtain it within 6 months of hire.

Nice To Haves

Experience with eMASS or similar GRC platforms.
Exposure to CI/CD tools such as GitLab CI, GitHub Actions, or Jenkins.
Exposure to containers or orchestration tools such as Docker or Kubernetes.
Basic scripting experience in Bash, Python, or PowerShell.
Familiarity with cloud platforms such as AWS or Azure and their native security services.
Experience with SIEM platforms such as Splunk or Elastic.
Familiarity with zero trust architecture principles.
Advanced certification such as CISSP, CISM, or CASP+.

Responsibilities

Perform ISSO duties for assigned systems and maintain their security posture throughout the RMF lifecycle.
Develop and maintain authorization artifacts, including System Security Plans, POA&Ms, risk assessments, and incident response plans.
Implement and validate security controls and support assessors through the authorization process.
Conduct vulnerability scanning, audit log review, and STIG compliance checks; work with system owners to remediate findings.
Harden operating systems, applications, and network components to STIG and SRG baselines.
Collaborate with DevSecOps engineers to integrate security tooling into CI/CD pipelines and translate control requirements into technical solutions.
Learn and apply DevOps practices such as containerization, Infrastructure-as-Code, and scripting to automate compliance evidence collection.
Identify repeatable manual security tasks and work with the team to automate them.
Investigate and document security incidents, and report findings to leadership and stakeholders.
Keep up with emerging threats and evolving cybersecurity policy, and recommend improvements to Zaden's security practices.