
51 - 200 employees
☁️ SaaS
🎖️ Defense
🏛️ Government
SaaS • Defense • Government
Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.
🔥 6 hours ago
⛰️ Colorado, Maryland, +1 more states – Remote
💵 $150k - $170k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
👻 Ghost score 12%
Where this job comes from
Posted on Second Front Systems's careers page, not through a job board
First seen by Remote Rocketship 6 hours ago
Still open on Second Front Systems's site. Checked 52 minutes ago.

51 - 200 employees
☁️ SaaS
🎖️ Defense
🏛️ Government
SaaS • Defense • Government
Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.
• Execute all phases of the NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments • Own eMASS authorization packages end-to-end, including control implementation details, test results, artifacts, and continuous monitoring status • Manage DISA PPSM registrations and reconcile ports, protocols, services, data flows, CAL, and boundary architecture • Author System Security Plans, control implementation narratives, Plans of Action & Milestones, and supporting RMF artifacts • Drive continuous monitoring operations, including monthly POA&M updates, vulnerability and patch reporting, IAVM compliance, significant change reviews, and periodic assessments • Validate STIG compliance and analyze ACAS/Tenable Nessus vulnerability scan results, tracking remediation against NIST 800-53 and DoD requirements • Serve as technical point of contact for ISSMs, assessors, and Authorizing Officials during assessments, readiness reviews, and audits • Partner with Product and Engineering to map AWS, containers, Kubernetes, and CI/CD controls to DoD RMF and NIST 800-53 requirements • Maintain authorization packages and defensible evidence collection across accredited systems
• 3–5 years hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with direct ISSO or equivalent compliance role supporting DoD ATO packages • Demonstrated proficiency building and maintaining authorization packages in eMASS • Working knowledge of DISA PPSM registration, ports, protocols, services process, CAL, and boundary/data-flow documentation • Strong practical knowledge of NIST 800-53 (Rev 4/5), NIST 800-37 RMF, and DoD-specific implementation guidance • Familiarity with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, DISA Cloud Computing SRG, and continuous monitoring standards • Solid understanding of AWS, containers, Kubernetes, and CI/CD, and how cloud-native patterns map to technical security controls • Strong written communication skills to produce assessor-ready documentation and clear control narratives • Active U.S. Secret security clearance required • DoD 8570/8140 IAM Level I or IAT Level II baseline certification (Security+, CISSP, or equivalent) required or obtainable within 90 days • U.S. citizenship required • Must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, CO
• Potential eligibility for equity awards • Discretionary bonuses • 100% employer-paid medical, dental, and vision coverage for you and your dependents • 401(k) with a 3% company contribution • Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more • Equity incentive plan • New hire technology and home office stipend • Annual professional development stipend • Flexible paid time off, plus all federal holidays • Generous parental leave • Flexible remote work opportunities • Employee referral bonus program
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
🔥 7 hours ago
Senior Security Engineer building cloud, application, and AI security detection for Angi’s home-services marketplace. Automating triage and leading incident response across distributed infrastructure.
🔥 7 hours ago
Information Security Engineer designing security architecture and controls for VSP Vision’s healthcare and vision-services technology. Managing vulnerabilities, compliance, incidents, and infrastructure protection remotely across the US.
🇺🇸 United States – Remote
💵 $72.5k - $125.5k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🔥 20 hours ago
Cybersecurity Specialist securing Naval Medical Center San Diego’s enterprise systems for a federal IT and healthcare services provider. Managing vulnerability remediation, RMF, compliance, and authorization activities remotely.
🇺🇸 United States – Remote
💵 $80k - $105k / year
⏰ Full Time
🟡 Mid-level
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🔥 21 hours ago
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
🇺🇸 United States – Remote
💵 $130k - $155k / year
⏰ Full Time
🟠 Senior
👮♂️ Cybersecurity / Security Engineer
🕒 Yesterday
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.