Senior Security Engineer

Position Summary

We are seeking a mid-level engineer with strong cybersecurity leadership skills to join our dynamic team. As a Cyber Security Engineer at Clarity Innovations, you will play a pivotal role in the success of our products.

The candidate must be familiar with DoD network and cyber security standards – guiding the development of Cybersecurity policy, requirements, engineering and certification, and accreditation. The candidate must be familiar with Risk Management Framework (RMF) requirements, DISA STIGs. The candidate must understand application of FIPS 140-2 compliance and NIST framework principles, and how these requirements translate to cyber security solutions, processes, configuration implementation, and application requirements. 

Primary Responsibilities (included but not limited to):

• Advises application teams on the security implications of both proposed and actual software modifications, ensuring awareness of risks and the integration of appropriate security measures. 
• Identifies and documents application teams’ proposed and actual changes, and recommended mitigation plans and security measures 
• Conducts comprehensive security engineering analyses, including vulnerability and risk assessments to inform risk decisions and mitigation strategies. 
• Assesses the effectiveness of implemented security controls, ensuring compliance with U.S. Air Force and DoD security standards and objectives. 
• Evaluates applications for potential security risks. Identifies and proposes improvements to security policies, standards and procedures, and risk mitigations / remediation activities. 
• Reviews and analyzes application architectures, data flows, and related processes or documentation to identify security deficiencies, recommending necessary adjustments and validating the implementation of such changes
• Participates in customer meetings, discussions and decisions. Identifies and proposes improvements to security policies, standards and procedures, and risk mitigation/remediation activities.
• Supports product development discovery efforts, security architecture design and control evaluation
• Shares best practices and technical knowledge among multiple teams/portfolios.

Required: 

• Minimum 3 years’ experience with DoD network engineering/management
• Minimum 3 years specified work in Cyber Security
• MUST hold at a minimum DoD 8140/8570 certification level: IAT II or IAT III
• MUST hold at least ONE of the following certifications: CASP+, AWS Security, CCSP, CSSLP (or Associate of ISC2), or equivalent technical security certification or demonstrated experience directly related to the problem domain
• Specific knowledge that may include, but is not limited to: Unix, DevSecOps, web application security, web application modernization, AWS cloud security, DoD/U.S. Air Force Risk Management Framework and related security policies and practices
• MUST be eligible to obtain a Common Access Card (CAC)

Non-Technical Competencies:

• SHALL be comfortable effectively leading a team and setting priorities 
• SHALL be able to provide technical guidance and constructive feedback for development teams  to reach compliance 
• Required: Strong communication/general soft skills 
• SHALL conduct themselves at all times in a professional and respectful manner
• SHALL give and receive feedback in a respectful and professional manner 
• SHALL be a “team player” and contribute to “can-do” culture

Salary Range: $116,000 - $286,000