Security and Authorization Lead

Job Summary

Overseeing security leadership and authorization activities, the full-time Security and Authorization Lead will manage security engineering, authorization documentation, and vulnerability management in a fully remote environment.

Key responsibilities

• Own the security approach and authorization package, including system boundary and threat model
• Direct the security engineering team and manage vulnerability management and POA&M
• Represent the program to the customer's Authorizing Official and brief authorization status at phase-exit reviews

Required qualifications

• 12+ years of experience in information systems security engineering, specifically with DoW Risk Management Framework authorizations
• Knowledge of NIST SP 800-53 Revision 5
• Experience with Open Security Controls Assessment Language (OSCAL)
• Active Secret clearance or higher is strongly preferred
• Experience with continuous Authorization to Operate (cATO) practices