Senior Security Engineer, Government Impact (Remote)

Cyberjobs; United States; Remote; USD 120,000 - 230,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401(k) with company match

Generous PTO & holidays

Professional development allowance

Job summary

Skylight, a government-focused digital consultancy, seeks a Security Engineer to automate security evidence generation and embed RMF/ATO into the software supply chain for a DoD program office. You will help migrate the first application onto a DoD software factory and guide teams toward an outcome-driven security model.

You will partner with government engineers and other contractors, coach partners on new testing and security practices, and work remotely while travel to U.S. bases when needed.

Qualifications

• Identify vulnerabilities across the application and enumerate risks.
• Mitigate risks by building secure and compliant systems.
• Experience automating security evidence generation or mapping controls under RMF.
• Experience RMF/ATO, ideally in DoD, including authoring the control implementation.

Responsibilities

• Automate security evidence generation and map RMF controls for continuous authorization.
• Author control implementations and the body of evidence for the software factory.
• Conduct security audits and risk analyses, then plan and implement remediations.
• Translate compliance requirements into practical engineering choices for the team.
• Build trust with security reviewers and explain technical tradeoffs clearly.
• Pair with and coach government teams to sustain security practices after project end.

Skills

RMF/ATO experience

Security automation

Vulnerability analysis

Regulatory compliance knowledge

Programming in at least one language

Cross-functional collaboration

DoD/government contracting

Threat modeling / risk analyses

Education

Bachelor's degree or higher

Tools

GitLab CI

Checkmarx

SBOM generation

Cloud platforms

Job description

Skylight, a government-focused digital consultancy, seeks a Security Engineer to automate security evidence generation and embed RMF/ATO into the software supply chain for a DoD program office. You will help migrate the first application onto a DoD software factory and guide teams toward an outcome-driven security model.

You will partner with government engineers and other contractors, coach partners on new testing and security practices, and work remotely while travel to U.S. bases when needed.