Information Systems Security Engineer

Highlights

• Own security authorization package for classified Arc Reactor deployment.
• Lead control assessment from tailoring through evidence to authorization.
• Explain Snowflake controls to reviewers and findings back to engineers.

Ideal candidate

A documentation-driven security owner who has shepherded systems to ATO and thrives bridging engineers and authorizing officials to drive classified deployments to authorization on schedule.

Requirements

• Taken at least one system through authorization to operate under NIST 800-53 / RMF, FedRAMP, or DoD RMF
• Can map engineering implementations to controls and resulting evidence
• Worked with government authorizing officials or security control assessors
• Writes clear assessment plans tracking scope, status, gaps and residual risk
• Eligible for TS/SCI with full-scope polygraph or already holds it