Security Engineer/ISSO Support in United States at Jobgether
Explore Related Opportunities
Job Description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer / ISSO Support based in the United States.
In this critical federal cybersecurity role, you will serve as a key security authority supporting a high-impact data engineering program handling highly sensitive financial information. You will be responsible for ensuring end-to-end compliance with federal security frameworks while embedding security and privacy controls across the entire system lifecycle. This includes guiding Authorization to Operate (ATO) processes, implementing Zero Trust Architecture within AWS environments, and ensuring continuous alignment with FISMA and NIST standards. You will work closely with engineering, privacy, and government stakeholders to assess risks, define controls, and safeguard data from design through production. The role is highly hands-on and requires deep technical expertise in cloud security, secure CI/CD practices, and federal compliance. It is ideal for a security professional who thrives in mission-critical, regulated environments where precision and accountability are essential.
- Serve as the primary ISSO and security subject matter expert supporting ATO processes and federal system authorization activities across the full SDLC.
- Design, implement, and maintain Zero Trust Architecture (ZTA) across AWS environments, ensuring security controls are embedded at every layer of the stack.
- Ensure compliance with federal standards including FISMA, NIST 800-53, NIST 800-63, OWASP ASVS Level 2, Privacy Act, and Federal Records Act requirements.
- Integrate security testing tools (SAST, DAST, OWASP ZAP, container scanning, dependency analysis) into CI/CD pipelines and enforce secure delivery practices.
- Manage AWS security services including IAM, Secrets Manager, CloudWatch, CloudTrail, AWS Config, and enforce secure configuration and logging standards.
- Support Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and documentation of data usage, retention, and protection policies.
- Collaborate with engineering, IV&V teams, and government stakeholders to resolve security findings and continuously improve system posture.
- Ensure auditability and compliance of production environments through monitoring, logging, and continuous security validation.
- Participate in Agile ceremonies, sprint planning, and DevSecOps delivery cycles using JIRA and GitHub.
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field.
- 6+ years of experience in federal information security, including ISSO responsibilities or ATO leadership within a civilian federal agency.
- Strong expertise in FISMA, NIST 800-53, NIST 800-63, and federal ATO/SDLC processes.
- Hands-on experience implementing Zero Trust Architecture in AWS, including IAM hardening, segmentation, and cloud security controls.
- Proven experience with CI/CD security tooling such as SAST, DAST, OWASP ZAP, and container vulnerability scanning.
- Deep knowledge of AWS security services including IAM, CloudTrail, CloudWatch, AWS Config, and Secrets Manager.
- Experience supporting or authoring PIAs, SORNs, and federal privacy/security documentation.
- Strong understanding of federal compliance frameworks including TIC, Section 508, 21st Century IDEA Act, and software supply chain security requirements.
- Excellent communication skills with ability to produce detailed security documentation and engage technical and non-technical stakeholders.
- U.S. citizenship required with ability to obtain or maintain public trust clearance; must be available to work Eastern Time hours.
- Competitive compensation aligned with federal cybersecurity market standards.
- Comprehensive health, dental, and vision insurance coverage.
- Flexible work arrangements supporting remote collaboration.
- Opportunities to work on high-impact federal programs handling sensitive national-scale data.
- Strong professional development culture focused on continuous learning in cybersecurity and cloud security.
- Exposure to advanced AWS security architectures and federal DevSecOps environments.
- Supportive, collaborative team culture with mentorship and knowledge sharing.