Security Compliance Engineer — TS/SCI (Poly) & RMF A&A

Socket.dev; Seattle (WA); On-site; USD 117,000 - 167,000; Full time

Job summary

Socket.dev is seeking a Security Compliance Engineer to monitor, assess, and drive security compliance across Remote Management and Administration networks. You will operate vulnerability scanning infrastructure, analyze results, and ensure RMNA environments meet DISA STIGs and RMF requirements.

This hands-on role requires converting scan data into actionable remediation with service owners, developing automation, and building dashboards for leadership and external security stakeholders.

Qualifications

• 3+ years of systems administration (Linux or Windows) experience.
• Current, active US Government Security Clearance of TS/SCI with Polygraph.
• Knowledge of configuration management systems, such as Puppet, Chef, Ansible, or related systems.
• Associate's degree or above, or Cloud+ or GICSP or GSEC or SSCP certification.

Responsibilities

• Operate and maintain Tenable/Nessus scanning infrastructure across multiple isolated ADC environments.
• Conduct vulnerability scans, analyze results, and drive service teams to patch compliance within SLA thresholds.
• Develop, operate, and maintain the comply-to-connect solution for RMNA networks.
• Assess environments against DISA STIGs for Windows 11, Windows Server, MS Exchange, and Skype for Business; track gaps.
• Build and maintain security compliance dashboards showing real-time host health and SLA status.
• Produce scan data and compliance artifacts for ingestion by AWS security teams and external customer systems.
• Develop Ansible playbooks and PowerShell automation to streamline scanning and remediation tracking.

Skills

Systems administration

Networking fundamentals

Vulnerability scanning

Windows/Linux OS administration

Education

Associate's degree or higher

Cloud+ or GICSP or GSEC or SSCP

Tools

Tenable Security Center

Nessus

Ansible

PowerShell

Puppet

Chef

Job description

Socket.dev is seeking a Security Compliance Engineer to monitor, assess, and drive security compliance across Remote Management and Administration networks. You will operate vulnerability scanning infrastructure, analyze results, and ensure RMNA environments meet DISA STIGs and RMF requirements.

This hands-on role requires converting scan data into actionable remediation with service owners, developing automation, and building dashboards for leadership and external security stakeholders.