Security Authorization Specialist

About the role

Second Front Systems is looking for a Security Authorization Specialist to lead the FedRAMP and agency ATO lifecycle for its Game Warden SaaS platform. The role combines deep compliance expertise with hands‑on technical work to keep the product authorized and continuously monitored for U.S. government customers.

Key responsibilities

• Drive end‑to‑end FedRAMP and agency ATO authorizations, including initial packages, annual assessments and major change requests.
• Author and maintain System Security Plans, control narratives, POA&Ms and other evidence artifacts that reflect the modern cloud architecture.
• Manage continuous monitoring activities such as monthly POA&M updates, vulnerability reporting, and annual control assessments.
• Serve as the primary technical point of contact for 3PAOs, agency reviewers and sponsor officials during audits.
• Partner with engineering, product and security operations to map cloud‑native controls to NIST 800‑53 requirements.

Required profile

• 7+ years of experience in security compliance, GRC or cybersecurity authorization.
• Active U.S. Top Secret clearance with eligibility for SCI access.
• Current professional security certification (CISSP, CISM or Security+).
• U.S. citizenship and residence in an approved hiring hub.

Required skills

• FedRAMP Moderate/High or DoD Impact Level authorization experience.
• Deep knowledge of NIST SP 800‑53 and NIST SP 800‑37 (RMF).
• Familiarity with AWS services, containers, Kubernetes and CI/CD pipelines.
• Ability to script in Python, Bash or SQL for automation.
• Experience with GRC automation platforms (e.g., Drata, Xacta, RegScale).
• Exposure to infrastructure‑as‑code tools such as Terraform.

What we offer

• Competitive base salary $119,000‑$160,000.
• 100% health, vision and dental coverage.
• 401(k) with 3% company match.
• Equity incentive plan and discretionary bonuses.
• Flexible paid time off, parental leave and remote‑first work model.