Cybersecurity Assessment Engineer

🕒 July 17

⛰️ Colorado, District of Columbia, +5 more states – Remote

⛰️ Colorado – Remote 🏛️ District of Columbia – Remote 🌲 North Carolina – Remote 🦀 Maryland – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $125k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Second Front Systems

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🎖️ Defense

🏛️ Government

SaaS • Defense • Government

Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.

📋 Description

• Review web application artifacts of customer developed applications and provide customer feedback • Primary face of the cybersecurity team to software development and mission success teams • Assist with incident response plans to respond to application outages or downtime • Technical Security Validation: Conduct comprehensive assessments of cloud infrastructure, applications, and containerized environments to verify compliance with DISA STIGs, SRGs, and CIS Benchmarks. • Authorization Lifecycle Management: Author, review, and maintain high-quality security artifacts, including System Security Plans (SSP), Security Assessment Plans (SAP), and Security Assessment Reports (SAR). • Continuous Monitoring (ConMon): Monitor and report on the ongoing effectiveness of security controls, ensuring the platform maintains a robust and authorized security posture. • Vulnerability & Risk Analysis: Utilize automated scanning suites (e.g., Anchore, Trivy, Tenable) to identify vulnerabilities, distinguish true positives, and provide actionable remediation guidance to dev teams. • Supply Chain Security: Implement and manage technical workflows for SBOMs (Software Bill of Materials) to support modern, continuous authorization standards. • Cross-Functional Collaboration: Partner with DevOps and Software Engineering teams to translate complex NIST 800-53 controls into implementable technical requirements.

🎯 Requirements

• Experience solving complex and sometimes ill-defined problems • Intermediate knowledge of DevSecOps tools and software development • Ability to create and implement incident response plans • Background in cybersecurity and understanding of vulnerability risk analysis • Hands-on experience assessing or securing services within AWS, Azure, or GCP, particularly within PaaS or Kubernetes-based environments. • Proficient knowledge of NIST SP 800-37 (RMF) and NIST SP 800-53 rev 5 security controls • Deep understanding of the FedRAMP authorization process and Department of Defense (DoD) security standards. • 3-5 years of relevant experience • Ability to attain DOD 8570 Baseline Certification for IAT II within 6 months of hire date (preferably CYSA+)

🏖️ Benefits

• Competitive Salary • 100% Healthcare, vision and dental coverage • 401(k) + 3% company contribution • Wellness perks (Fitness classes, mental health resources) • Equity incentive plan • Tech + office supplies stipend • Annual professional development stipend • Flexible paid time off + federal holidays off • Parental leave • Work from anywhere • Referral Bonus