Defense Unicorns

Security Engineer

• Leading and pathfinding the effort to achieve accreditation in accordance with NIST-800 series requirements.
• Developing and implementing cybersecurity policies, procedures, and controls necessary to meet DoD accreditation standards.
• Conducting comprehensive risk assessments and vulnerability analyses to identify potential security threats and mitigate risks.
• Collaborating with cross-functional teams including software developers, system architects, and other Government stakeholders to integrate cybersecurity measures into the software development lifecycle.
• Performing security testing and evaluation of our software platform to identify vulnerabilities and weaknesses (STIGs, ACAS, CI/CD security testing, etc.)
• Providing guidance and support to ensure continuous monitoring and maintenance of cybersecurity controls.
• Preparing and maintaining documentation required for the accreditation process, including System Security Plans (SSPs), Security Assessment Reports (SARs), and other relevant artifacts.
• Staying up-to-date with evolving cybersecurity threats, technologies, and regulations to proactively address security challenges and compliance requirements.
• Serving as a subject matter expert on cybersecurity best practices, standards, and procedures within the organization.
• Supporting automated Compliance-as-Code capabilities that continuously evaluate the cybersecurity posture of the tech stack.

Cybersecurity Engineer