Information Security Engineer

Colonial Group; Reston (VA); Remote; USD 120,000 - 180,000; Full time

Job summary

ASRC Federal Agile Decision Sciences LLC is seeking an Information Security Engineer with an active DoD Secret clearance to support DSOP platform-wide cybersecurity requirements. This role emphasizes secure configurations, continuous monitoring, vulnerability management, and compliance across DSOP environments.

The position is remote with a US-based candidate requirement and standard EST working hours. You will collaborate with DevSecOps and infrastructure teams to enforce security across

Qualifications

• 8–10+ years of cybersecurity or security engineering experience.
• Active DoD Secret clearance or higher; candidates without Secret will not be considered.
• Familiarity with DoD STIGs, RMF, ACAS, Nessus, OpenSCAP, etc.
• Experience supporting secure cloud or platform environments.
• Security certifications preferred (Security+, CEH, CISSP, CCSK, etc.)

Responsibilities

• Conduct container and Kubernetes security assessments
• Develop hardened configurations and STIG-aligned baselines
• Build and maintain security controls for container registries, images, and pipelines
• Perform vulnerability scanning, remediation tracking, and reporting
• Support RMF accreditation, continuous monitoring, and security engineering tasks
• Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
• Implement zero-trust security patterns and secure deployment workflows
• Manage secrets, certificate rotation, and identity enforcement

Skills

Kubernetes security

Container scanning tools

Image hardening

RMF & DoD guidelines

Vulnerability management

CI/CD security

Zero-trust security

Secrets management

Education

Bachelor’s Degree in Computer Science or Engineering with security concentration

Advanced degree in Information Security/Cyber Security

Tools

Nessus

OpenSCAP

ACAS

Kubernetes security tooling

Job description

ASRC Federal Agile Decision Sciences LLC is seeking an Information Security Engineer with a minimum of an active DoW Secret security clearance to support DSOP platform-wide cybersecurity requirements. These analysts will ensure secure configuration, continuous monitoring, vulnerability management, and compliance across DSOP environments.

This position is remote, candidate must be U.S. based. Required work schedule is Eastern Standard Time Working Hours (8 am to 5 pm).

Responsibilities:

• Conduct container and Kubernetes security assessments
• Develop hardened configurations and STIG-aligned baselines
• Build and maintain security controls for container registries, images, and pipelines
• Perform vulnerability scanning, remediation tracking, and reporting
• Support RMF accreditation, continuous monitoring, and security engineering tasks
• Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
• Implement zero-trust security patterns and secure deployment workflows
• Manage secrets, certificate rotation, and identity enforcement

Qualifications:

• 8–10+ years of cybersecurity or security engineering experience
• Active DoW Secret clearance or higher. Candidates without a minimum of a Secret clearance will not be considered.
• Expertise with Kubernetes security, container scanning tools, and image hardening is mandatory.
• Bachelor’s Degree in Computer Science, or other Engineering, or Technical discipline with an Information Security or Cyber Security Concentration, Advanced Degree with concentration in Information Security or Cyber Security are all preferred or 4+ additional years of equivalent professional work experience.
• Familiarity with DoD STIGs, RMF, ACAS, Nessus, OpenSCAP, etc.
• Experience supporting secure cloud or platform environments
• Security certifications preferred (Security+, CEH, CISSP, CCSK, etc.)