Cybersecurity Assessment Engineer

About the role

Second Front Systems is seeking a battle‑tested Cybersecurity Assessment Engineer to build and operate a modern, resilient security function for its cloud‑based mission‑critical platforms. You will protect infrastructure that supports national‑security software and ensure a strong security posture for customers.

Key responsibilities

• Review web‑application artifacts from customer‑developed applications and provide feedback.
• Conduct comprehensive assessments of cloud infrastructure, containers, and applications against DISA STIGs, SRGs, and CIS Benchmarks.
• Manage the authorization lifecycle, authoring and maintaining System Security Plans, Security Assessment Plans, and Security Assessment Reports.
• Perform continuous monitoring and report on the effectiveness of security controls.
• Run automated vulnerability scans using tools such as Anchore, Trivy, and Tenable, triage findings, and guide remediation.
• Implement supply‑chain security workflows for Software Bill of Materials (SBOMs) and collaborate with DevOps to translate NIST 800‑53 controls into technical requirements.

Required profile

• 3‑5 years of experience solving complex cybersecurity problems.
• Hands‑on experience securing services in AWS, Azure or GCP, especially in PaaS or Kubernetes environments.
• Proficient knowledge of NIST SP 800‑37, NIST SP 800‑53 rev 5, FedRAMP and DoD security standards.
• Ability to obtain a DoD 8570 IAT II certification (e.g., CYSA+) within six months.
• Strong interest in national security and ability to develop incident‑response plans.

Required skills

• Anchore, Trivy, Tenable scanning tools.
• Docker, GitLab, Kubernetes.
• AWS, Azure, GCP cloud platforms.
• Python and Bash scripting.

What we offer

• Competitive salary $125 k–$140 k per year.
• 100 % health, vision and dental coverage.
• 401(k) with 3 % company match.
• Equity incentive plan and referral bonus.
• Flexible paid time off, parental leave and ability to work from anywhere.