Sr IT Security Engineer

Socket.dev; San Antonio (TX); On-site; USD 140,000 - 160,000; Full time

Job summary

GovCIO is seeking an IT Security Engineer Senior to support the 16AF/AF IC zero-trust initiative at Joint Base San Antonio, Lackland. This onsite role requires ensuring cyber requirements for mission systems, RMF activities, and secure cloud architectures are implemented and monitored.

Ideal candidates have TS/SCI clearance, 8+ years of cybersecurity experience, and DoD/IC background with NIST guidance. Strong communication and collaboration with program managers and officials are essential.

Qualifications

• Clearance: TS/SCI.
• 8+ years of information security or cybersecurity engineering experience, including federal/DoD experience.
• Active certification meeting DoD 8570 IAT III.
• Understanding of RMF and security control design.
• Knowledge of NIST SP 800-37/800-53/800-53A.
• Experience with cloud security and Zero Trust.
• Strong communication, written and spoken.

Responsibilities

• Lead RMF activities across moderate- to high-impact systems.
• Develop and tailor security controls using NIST/DoD requirements.
• Prepare SSPs, SARs, POAs/Milestones, risk assessments, and authorization packages.
• Advise on cybersecurity risks and remediation strategies to stakeholders.
• Assess cloud architectures for security/compliance; support Zero Trust.
• Conduct security control assessments and continuous monitoring.
• Coordinate remediation and risk acceptance processes.
• Develop cybersecurity documentation and executive-level recommendations.

Skills

TS/SCI clearance

RMF activities

NIST/NIST SP 800-37

Zero Trust

Cloud security

SIEM

communication

security control tailoring

authorization packages

Education

DoD 8570 IAT III certification

High school diploma

Tools

eMASS

Archer

Splunk

Microsoft Sentinel

ServiceNow GRC

Job description

GovCIO is currently hiring for an IT Security Engineer Senior to support the 16AF/AF IC zero trust initiative. This position will be located at Joint Base San Antonio, Lackland and will be an onsite position.

Responsibilities

This position will support Air Force Intelligence Community mission systems in the implementation, assessment, and continuous monitoring of cybersecurity requirements. The engineer will lead Risk Management Framework activities, develop and tailor security controls, strengthen cloud security architectures, and advance Zero Trust capabilities across classified and unclassified environments. The role requires strong knowledge of federal, DoD, Air Force, and Intelligence Community cybersecurity policies and the ability to translate them into practical engineering and compliance outcomes.

• Lead and support RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, tailor, document, and validate security controls and implementation statements using NIST, DoD, Air Force, and Intelligence Community requirements.
• Prepare and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization packages.
• Advise program managers, system owners, ISSOs, ISSMs, engineers, and Authorizing Officials on cybersecurity risks and remediation strategies.
• Assess cloud architectures and services for compliance with security, privacy, identity, logging, encryption, data protection, and boundary requirements.
• Support Zero Trust implementation, including identity-centric access control, least privilege, device trust, segmentation, continuous verification, and data-centric security.
• Conduct security control assessments, vulnerability reviews, configuration assessments, and continuous monitoring activities.
• Coordinate remediation of findings and track risks through closure or formal risk acceptance.
• Support security architecture reviews, system design assessments, and mission-impact analyses.
• Develop cybersecurity documentation, briefings, risk reports, and executive-level recommendations.

Qualifications

Required Skills and Experience

Clearance: TS/SCI

• High school diploma with 9+ years’ experience in cybersecurity, computer science, information systems, engineering, or a related discipline.
• Eight or more years of information security or cybersecurity engineering experience, including significant federal, DoD, Air Force, or Intelligence Community work.
• Must possess and maintain active certification that meets DOD 8570 IAT III in lieu of DoD 8140 job code 633 System Security Engineer.
• Understanding of systems security design and engineering principles.
• Knowledge of cybersecurity and zero trust reference architectures.
• Strong understanding of SIEM systems.
• Strong understanding of security for cloud-based platforms and applications.
• Excellent communication skills (spoken and written).
• Experience creating security workflows and diagrams based on system architecture.
• Understanding of Model Based Systems Engineering and the correlation to cybersecurity.
• Demonstrated experience executing RMF activities for moderate- or high-impact systems.
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and applicable DoD or Intelligence Community cybersecurity guidance.
• Experience developing, tailoring, implementing, and assessing security controls.
• Experience preparing authorization packages and working with system owners, ISSOs, ISSMs, security assessors, and Authorizing Officials.
• Practical knowledge of cloud security architectures, including identity and access management, encryption, logging, network security, configuration management, and secure service deployment.
• Knowledge of Zero Trust principles and architectures, including identity, device, application, network, and data protection.
• Ability to analyze technical and operational risks and communicate findings clearly to technical and executive audiences.

Preferred Skills and Experience

• Experience supporting Air Force, Space Force, DoD, and/or Intelligence Community systems and mission applications.
• Experience with classified environments, cross-domain solutions, high-side/low-side architectures, and compartmented or mission-partitioned systems.
• Experience with FedRAMP, DoD Cloud Computing Security Requirements Guide, IL4/IL5/IL6 environments, or comparable cloud authorization processes.
• Experience implementing Zero Trust using identity governance, privileged access management, micro segmentation, endpoint detection and response, security analytics, and continuous diagnostics.
• Familiarity with CNSSI 1253, ICD 503, DoD RMF guidance, Air Force cybersecurity policy, and applicable Intelligence Community directives.
• Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
• Experience with GRC and security tools such as eMASS, ServiceNow GRC, Archer, Tenable, ACAS, SCAP, Splunk, Microsoft Sentinel, or comparable platforms.
• Experience performing security architecture reviews, threat modeling, attack-surface analysis, and control inheritance analysis.
• Experience leading technical teams, mentoring junior security personnel, or briefing senior government stakeholders.

#NSS

#AR

Posted Salary Range

USD $140,000.00 - USD $160,000.00 /Yr.

}