Senior/Staff Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $150k - $203k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Skylight

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

💼 Consulting

🏛️ Government

Consulting • Government • Technology

Skylight is a digital consultancy using design and technology to help agencies deliver better public services. With a focus on modernizing government services through human-centered design and lean-agile engineering, Skylight empowers public servants to enhance their capabilities in the digital era. Combining government and commercial expertise, the company is dedicated to solving the toughest digital challenges faced by agencies and fostering a culture of innovation and continuous improvement in the public sector.

📋 Description

• Automate security evidence generation and map controls under RMF to support continuous authorization • Author control implementations and the body of evidence, including documenting controls inherited from the software factory • Conduct security audits and risk analyses, and plan and implement remediations • Translate compliance requirements into practical engineering choices the team can act on • Build trust with security reviewers and authorizing officials, and explain technical tradeoffs clearly • Pair with and coach government teams so they can sustain these security practices after we leave • Work with the Skylight team and government personnel to learn how the program office delivers changes • Understand where testing and security slow delivery down • Work alongside government engineers and other contractors as tools and processes evolve

🎯 Requirements

• Able to detect risks by continually reviewing all aspects of the application for vulnerabilities and enumerating them • Able to mitigate and prevent risks by proactively working with teams to build secure and compliant systems • Familiarity with common sources of vulnerability information • Familiarity with regulatory requirements regarding security and compliance • Experience taking systems through RMF and ATO, ideally in DoD, including authoring the control implementation and body of evidence • Experience automating security evidence generation or mapping controls under RMF • Can write clean, working, and reusable code in at least one programming language • Experience working on cross-functional teams (product, design, engineering, ops) in iterative delivery • A track record of staying aligned and accountable on remote teams • A mindset and work approach that aligns with our core values • Experience with continuous ATO, eMASS, and POA&M management • Experience documenting inherited controls from a cloud platform or DoD software factory (Cloud One, MDaaS, Platform One, or similar) • Experience with compliance as code, including GitLab CI, Checkmarx or other static code scanning, and SBOM generation • Experience with cloud infrastructure and infrastructure as code • Experience delivering technology in government, regulated industries, or other public-benefit settings • All work must be conducted within the U.S., excluding U.S. territories • U.S. citizenship required for employment eligibility • Must be able to obtain a Common Access Card (CAC) and any special access required for this contract • Must successfully complete a company background check

🏖️ Benefits

• Medical insurance, dental insurance, vision insurance • Short-term and long-term disability insurance • Life and AD&D insurance • Dependent care FSA, healthcare FSA, health savings account • Dollar-for-dollar 401(k) match up to 10% of your salary with no vesting period • Flexible paid-time-off policy (generally around 25 days per year), plus 11 paid federal holidays • Up to 12 weeks paid-time-off for all eligible new birth, adoption, or foster parents • Performance rewards, including annual salary increase, annual performance bonus, spot bonuses, and stock options • Business development / sales bonuses • Referral bonuses • Annual $2,000 allowance for professional development • Annual $750 allowance for tech-related purchases • Annual swag budget of $100 to display your Skylight pride with some merchandise (hoodies, hats, and more) • Flexible, remote-friendly work environment • An environment that empowers you to unleash your superpowers for public good

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume