Cybersecurity Assessment Engineer

Cybersecurity Assessment Engineer role focused on overseeing vulnerability scanning, risk assessment, and remediation guidance for cloud-based systems and DoD/government-facing applications. You will coordinate with Principal Security Engineer, Platform, and Customer Operations teams to review web application artifacts, act as the primary face of the cybersecurity team to software development and mission success teams, and contribute to incident response plans. Responsibilities include technical security validation against DISA STIGs, SRGs, and CIS Benchmarks; authoring and maintaining security artifacts (SSP, SAP, SAR); continuous monitoring of security controls; performing vulnerability and risk analysis with automated scanners (Anchore, Trivy, Tenable); managing SBOM workflows for modern authorization standards; and translating NIST SP 800-53 controls into actionable technical requirements for DevOps and Software Engineering teams. Required qualifications emphasize experience with AWS/Azure/GCP in PaaS/Kubernetes environments, DoD security standards, FedRAMP, and 3-5 years of relevant experience, with Secret clearance and ability to attain DOD 8570 IAT II baseline within 6 months (CYSA+ preferred). The role offers 100% healthcare, 401(k) with company match, equity, professional development stipend, flexible PTO, parental leave, and work-from-anywhere flexibility under the company’s benefits, with open applications until filled.