Staff/Principal Security Engineer (Defense & Security)

Skylight

3d•Remote

About The Position

At Skylight, security engineers stay up to date with the cutting edge of security and help teams implement new processes, tools, and remediations. They’re familiar with modern software development and work in cross-functional teams to inform and guide security best practices at all stages of the software development life cycle.

Requirements

Able to detect risks by continually reviewing all aspects of the application for vulnerabilities and enumerating them
Able to mitigate and prevent risks by proactively working with teams to build secure and compliant systems
Familiarity with common sources of vulnerability information
Familiarity with regulatory requirements regarding security and compliance
Ability to work successfully within a professional services environment (e.g., can communicate effectively with clients)
Passionate about creating better public outcomes through great government services
A mindset and work approach that aligns with our core values
Ability to travel for work from time to time
All work must be conducted within the U.S., excluding U.S. territories.
Some federal contracts require U.S. citizenship to be eligible for employment.
You must be legally authorized to work in the U.S. now and in the future without sponsorship.
As a government contractor, you may be required to obtain a public trust or security clearance.
You may be required to complete a company background check successfully.
Some of our available roles are on federal contracts that require a degree or additional years of experience as a substitute.

Nice To Haves

Can write clean, working, and reusable code in at least one programming language
Experience with application development, particularly web development and testing frameworks
Experience with cloud infrastructure and infrastructure as code
Prior experience working in the civic tech space
Experience working in a remote-team environment

Responsibilities

Protect sensitive data by applying security and privacy best practices
Conduct security audits and risk analyses
Plan and implement remediations
Conduct ongoing research to keep up with industry practices and new attack vectors
Select and use the right tools, frameworks, languages, and technologies for the job, with a preference for open-source solutions

Benefits

Medical insurance, dental insurance, vision insurance
Short-term and long-term disability insurance
Life and AD&D insurance
Dependent care FSA, healthcare FSA, health savings account
Dollar-for-dollar 401(k) match up to 10% of your salary with no vesting period
Flexible paid time-off-policy (generally around 25 days per year), plus 11 paid federal holidays
Up to 12 weeks paid-time-off for all eligible new birth, adoption, or foster parents
Performance rewards, including annual salary increase, annual performance bonus, spot bonuses, and stock options
Business development / sales bonuses
Referral bonuses
Annual $2,000 allowance for professional development
Annual $750 allowance for tech-related purchases
Annual swag budget of $100 to display your Skylight pride with some merchandise (hoodies, hats, and more)
Dollar-for-dollar charity donation matching, up to $500 per year
Flexible, remote-friendly work environment
An environment that empowers you to unleash your superpowers for public good