Sr. Principal Information Security Engineer
Sign up free to see how well your resume matches this role.
What you'll do
- Ensure that all capabilities developed by the team comply with security requirements, classification boundaries, IC security policies, and applicable RMF/cATO processes.
- Incorporate security throughout architecture, development, testing, deployment, and sustainment rather than treated as a final approval activity.
- Conduct security architecture reviews, threat modeling, vulnerability assessment, security testing, AI-specific risk assessment, and compliance documentation.
- Support the Government's software approval process and work closely with the platform and software engineers to automate security controls wherever practical.
What they're looking for
- RMF
- cATO/DevSecOps security practices
- Security architecture
- Threat modeling
- Vulnerability management
- Security testing
- Application security
- API security
- Container security
- Kubernetes security
- Cloud security
- Identity and access management
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world.
Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact.
We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.
Role Description:
The Security/AI Assurance Engineer will ensure that all capabilities developed by the team comply with security requirements, classification boundaries, IC security policies, and applicable RMF/cATO processes. Security will be incorporated throughout architecture, development, testing, deployment, and sustainment rather than treated as a final approval activity.
The engineer will conduct security architecture reviews, threat modeling, vulnerability assessment, security testing, AI-specific risk assessment, and compliance documentation. The position will also support the Government's software approval process and work closely with the platform and software engineers to automate security controls wherever practical.
Technical Skills:
- RMF
- cATO/DevSecOps security practices
- Security architecture
- Threat modeling
- Vulnerability management
- Security testing
- Application security
- API security
- Container security
- Kubernetes security
- Cloud security
- Identity and access management
- Authentication/authorization
- Encryption and key management
- Logging and security monitoring
- Linux security
- Network segmentation
- Data classification and handling
- Secure SDLC
- SBOM and software supply-chain security
- NIST cybersecurity frameworks
- STIGs and/or applicable government security controls
- AI/ML security and AI assurance
Salary Range: $139,000 - $314,000
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.