Cybersecurity Engineer

Zadentech; Huntsville (AL); On-site; USD 95,000 - 140,000; Full time

Job summary

Zaden Technologies in Huntsville, AL is seeking a Cybersecurity Engineer with a strong ISSO background. You will manage RMF packages, perform vulnerability scans, and collaborate with DevSecOps to automate compliance in pipelines and cloud environments.

Ideal candidates have 3+ years in cybersecurity, experience with STIGs/NIST controls, and DoD 8140/8570 IAT II certification or the ability to obtain within 6 months. This on-site role offers hands-on growth in security automation.

Qualifications

• U.S. Citizenship and active security clearance (Secret) required.
• 3+ years of cybersecurity experience with ISSO or equivalent.
• RMF and NIST SP 800-53 knowledge.
• Experience with authorization packages (SSP, POA&Ms).
• Vulnerability scanning tools and STIG compliance experience.
• Experience hardening Linux/Windows systems.
• Strong security documentation skills.
• Willingness to learn DevOps tooling; IAT Level II cert or ability to obtain.

Responsibilities

• Perform ISSO duties for assigned systems and maintain RMF posture.
• Develop/maintain authorization artifacts (SSP, POA&Ms, risk assessments).
• Implement and validate security controls; support authorization.
• Conduct vulnerability scans, log reviews, STIG checks; remediate findings.
• Harden OS, apps, and network components to STIG/SRG baselines.
• Collaborate with DevSecOps to integrate security into CI/CD pipelines.
• Learn IaC and scripting to automate compliance evidence collection.
• Identify repeatable tasks and drive automation.
• Investigate incidents and report findings to leadership.
• Monitor threats and evolving policy; recommend improvements.

Skills

Security clearance (Secret)

RMF knowledge

DevSecOps interest

Security documentation

Scripting (Bash/Python/PowerShell)

Education

DoD 8140/8570 IAT Level II certification

CISSP / CISM / CASP+ (preferred)

Tools

ACAS/Nessus

STIG Viewer

SCAP Compliance Checker

Job description

Join Zaden Technologies on our mission to simplify the delivery and improve the utility of software products for our customers. At Zaden, we believe that our employees are our greatest assets. We hire the right candidates with the right skill sets who fit our culture of customer obsession, innovation, and continuous learning. We are our customer’s biggest advocate and we are looking for like-minded individuals who encompass these same ideals. It is important to us to offer you competitive pay and comprehensive benefits with opportunities that match your life and propel your career!

Zaden Technologies is looking for a Cybersecurity Engineer with a strong ISSO background who's ready to grow into the DevOps side of security. You'll keep the systems you support secure and authorized by managing RMF packages, running continuous monitoring, hardening environments and driving vulnerabilities to closure. You'll also work alongside our DevSecOps engineers to learn how security gets built into pipelines, containers and cloud infrastructure, and you'll help us replace manual compliance work with automation. If you're a hands-on security professional who's curious about automation and excited to expand your technical toolkit, we'd love to help you grow as we automate a smarter future.

Role Responsibilities:

• Perform ISSO duties for assigned systems, maintaining their security posture throughout the RMF lifecycle
• Develop and maintain authorization artifacts, including System Security Plans, POA&Ms, risk assessments and incident response plans
• Implement and validate security controls, and support assessors through the authorization process
• Conduct vulnerability scanning, audit log review and STIG compliance checks, and work with system owners to remediate findings
• Harden operating systems, applications and network components to STIG and SRG baselines
• Collaborate with DevSecOps engineers to integrate security tooling into CI/CD pipelines and translate control requirements into technical solutions
• Learn and apply DevOps practices such as containerization, Infrastructure-as-Code and scripting to automate compliance evidence collection
• Identify repeatable manual security tasks and work with the team to automate them
• Investigate and document security incidents, and report findings to leadership and stakeholders
• Keep up with emerging threats and evolving cybersecurity policy, and recommend improvements to Zaden's security practices

Required Qualifications:

• U.S. Citizenship and active security clearance (minimum secret)
• 3+ years of cybersecurity experience, including hands-on work as an ISSO or in an equivalent information assurance role
• Working knowledge of the Risk Management Framework (RMF) and NIST SP 800-53 security controls
• Experience preparing and maintaining authorization packages, including SSPs and POA&Ms
• Experience with vulnerability scanning and compliance tools such as ACAS/Nessus, SCAP Compliance Checker or STIG Viewer
• Hands-on experience hardening Linux or Windows systems
• Strong written communication skills for security documentation and reporting
• A genuine interest in learning DevOps tools and practices, and the motivation to build those skills on the job
• DoD 8140/8570 IAT Level II certification (e.g., CompTIA Security+) or ability to obtain within 6 months of hire

Preferred Qualifications:

• Experience with eMASS or similar GRC platforms
• Exposure to CI/CD tools such as GitLab CI, GitHub Actions or Jenkins
• Exposure to containers or orchestration tools such as Docker or Kubernetes
• Basic scripting experience in Bash, Python or PowerShell
• Familiarity with cloud platforms such as AWS or Azure and their native security services
• Experience with SIEM platforms such as Splunk or Elastic
• Familiarity with zero trust architecture principles
• Advanced certification such as CISSP, CISM or CASP+