Cybersecurity Engineer (Assessment and Authorization / Compliance)

Zaden Technologies, Inc.; Denver (CO); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Paid holidays

Flexible PTO

Employer 401k contributions

Health insurance for dependents

Growth opportunities

Job summary

Zaden Technologies in Aurora, CO is seeking a Cybersecurity Engineer to bring a DevSecOps mindset to ATO, wiring evidence collection directly into the CI/CD pipeline so authorization keeps pace with continuous deployment.

You will own SSPs, RMF/ATO artifacts, SBOMs, and container security tooling, and coordinate with government security stakeholders to automate evidence generation and remediation within a modern delivery system.

Qualifications

• Active TS/SCI clearance, or current TS/SCI eligibility, and U.S. citizenship.
• 4+ years in cybersecurity for DoD or federal systems with direct RMF/A&A package experience (SSP, POA&M, ATO artifacts).
• DoD 8140/8570 baseline certification (Security+ CE or equivalent minimum).
• Working knowledge of container security: image scanning, SBOMs, and static/dynamic analysis tooling.
• Comfort working inside a CI/CD pipeline and automating evidence generation rather than assembling it manually.

Responsibilities

• Prepare and maintain security packages for containerized deployments, including SSP, ATO artifacts, and supporting RMF documentation.
• Build automated evidence collection into the CI/CD pipeline so SBOMs, scan outputs, and compliance artifacts generate continuously rather than at release time.
• Own static/dynamic analysis tooling (SonarQube or similar) and container image scanning as part of the delivery pipeline.
• Coordinate package submission and remediation with government security stakeholders, keeping pace with an evidence-as-code approach to ATO.
• Partner with the DevSecOps team to treat authorization gates like any other pipeline gate: automated, repeatable, and continuously validated.
• Flex into DevSecOps tasks as workload allows.

Skills

DevSecOps

CI/CD automation

Container security

RMF/A&A familiarity

Scripting

Education

Security+ CE or equivalent

DoD 8140/8570 baseline certification

Tools

SonarQube

Kubernetes

SBOM tooling

Job description

Cybersecurity Engineer (Assessment and Authorization / Compliance)

Join Zaden Technologies on our mission to simplify the delivery and improve the utility of software products for our customers. At Zaden, we believe that our employees are our greatest assets. We hire the right candidates with the right skill sets who fit our culture of customer obsession, innovation, and continuous learning. We are our customer's biggest advocate and we are looking for like-minded individuals who encompass these same ideals. It is important to us to offer you competitive pay and comprehensive benefits with opportunities that match your life and propel your career!

Zaden Technologies is hiring a Cybersecurity Engineer to bring a DevSecOps mindset to ATO: instead of assembling a security package by hand at the end of a release, you'll wire evidence collection directly into the delivery pipeline so authorization keeps pace with continuous deployment. This is package cyber, not SOC work - you'll own the artifacts that let containerized applications move onto a government system, treating SBOMs, scan results, and compliance evidence as pipeline outputs rather than one-off paperwork. This is a full-time, on-site position in Aurora, CO, with some travel, and an anticipated start of April 2027.

Role Responsibilities:

• Prepare and maintain security packages for containerized deployments, including SSP, ATO artifacts, and supporting RMF documentation
• Build automated evidence collection into the CI/CD pipeline so SBOMs, scan outputs, and compliance artifacts generate continuously rather than at release time
• Own static/dynamic analysis tooling (SonarQube or similar) and container image scanning as part of the delivery pipeline
• Coordinate package submission and remediation with government security stakeholders, keeping pace with an evidence-as-code approach to ATO
• Partner with the DevSecOps team to treat authorization gates like any other pipeline gate: automated, repeatable, and continuously validated
• Flex into DevSecOps tasks as workload allows

Required Qualifications:

• Active TS/SCI clearance, or current TS/SCI eligibility, and U.S. citizenship
• 4+ years in cybersecurity for DoD or federal systems with direct RMF/A&A package experience (SSP, POA&M, ATO artifacts)
• DoD 8140/8570 baseline certification (Security+ CE or equivalent minimum)
• Working knowledge of container security: image scanning, SBOMs, and static/dynamic analysis tooling
• Comfort working inside a CI/CD pipeline and automating evidence generation rather than assembling it manually

Preferred Qualifications:

• Hands-on DevSecOps skills (pipelines, Kubernetes, scripting) to serve as a cross-certified cyber/DevOps resource
• Experience with continuous-ATO or evidence-as-code approaches on DoD software factory programs
• eMASS or equivalent authorization-tracking system experience
• Experience supporting space or missile warning ground systems

What we offer:

• Robust startup environment with a variety of projects to work on
• Growth paths and endless opportunities to learn and develop
• Paid holidays and flexible paid time off
• Employer contributions toward 401k
• 50% coverage of health insurance for employees and their dependents

The pay range for this role is:

120,000 - 155,000 USD per year (Zaden Technologies - Denver)