Security Engineer/ISSO Support Full Time NEW

In this critical federal cybersecurity role, you will serve as a key security authority supporting a high-impact data engineering program handling highly sensitive financial information. You will be responsible for ensuring end-to-end compliance with federal security frameworks while embedding security and privacy controls across the entire system lifecycle. This includes guiding Authorization to Operate (ATO) processes, implementing Zero Trust Architecture within AWS environments, and ensuring continuous alignment with FISMA and NIST standards. You will work closely with engineering, privacy, and government stakeholders to assess risks, define controls, and safeguard data from design through production. The role is highly hands-on and requires deep technical expertise in cloud security, secure CI/CD practices, and federal compliance. It is ideal for a security professional who thrives in mission-critical, regulated environments where precision and accountability are essential.

Accountabilities

• Serve as the primary ISSO and security subject matter expert supporting ATO processes and federal system authorization activities across the full SDLC.
• Design, implement, and maintain Zero Trust Architecture (ZTA) across AWS environments, ensuring security controls are embedded at every layer of the stack.
• Ensure compliance with federal standards including FISMA, NIST 800-53, NIST 800-63, OWASP ASVS Level 2, Privacy Act, and Federal Records Act requirements.
• Integrate security testing tools (SAST, DAST, OWASP ZAP, container scanning, dependency analysis) into CI/CD pipelines and enforce secure delivery practices.
• Manage AWS security services including IAM, Secrets Manager, CloudWatch, CloudTrail, AWS Config, and enforce secure configuration and logging standards.
• Support Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and documentation of data usage, retention, and protection policies.
• Collaborate with engineering, IV&V teams, and government stakeholders to resolve security findings and continuously improve system posture.
• Ensure auditability and compliance of production environments through monitoring, logging, and continuous security validation.
• Participate in Agile ceremonies, sprint planning, and DevSecOps delivery cycles using JIRA and GitHub.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field.
• 6+ years of experience in federal information security, including ISSO responsibilities or ATO leadership within a civilian federal agency.
• Strong expertise in FISMA, NIST 800-53, NIST 800-63, and federal ATO/SDLC processes.
• Hands-on experience implementing Zero Trust Architecture in AWS, including IAM hardening, segmentation, and cloud security controls.
• Proven experience with CI/CD security tooling such as SAST, DAST, OWASP ZAP, and container vulnerability scanning.
• Deep knowledge of AWS security services including IAM, CloudTrail, CloudWatch, AWS Config, and Secrets Manager.
• Experience supporting or authoring PIAs, SORNs, and federal privacy/security documentation.
• Strong understanding of federal compliance frameworks including TIC, Section 508, 21st Century IDEA Act, and software supply chain security requirements.
• Excellent communication skills with ability to produce detailed security documentation and engage technical and non-technical stakeholders.
• U.S. citizenship required with ability to obtain or maintain public trust clearance; must be available to work Eastern Time hours.

Benefits

• Competitive compensation aligned with federal cybersecurity market standards.
• Comprehensive health, dental, and vision insurance coverage.
• Flexible work arrangements supporting remote collaboration.
• Opportunities to work on high-impact federal programs handling sensitive national-scale data.
• Strong professional development culture focused on continuous learning in cybersecurity and cloud security.
• Exposure to advanced AWS security architectures and federal DevSecOps environments.
• Supportive, collaborative team culture with mentorship and knowledge sharing.

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role’s core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.