Information Systems Security Engineer

Description

The company builds modern defense products on Coherent Distributed Networks, helping warfighters, commercial air operators, and border protection teams act faster and adapt to new threats.

Founded in 2022, the company has raised $1 billion from investors including 8VC, Accel, and Valor Equity Partners. It is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, and London, and has 500+ employees.

This is the main security engineering role for a next generation classified processing environment spanning one or more Program Security Authorization boundaries. You would own the work from the first system security architecture through Assessment and Authorization (A&A) and then ongoing monitoring after Authority to Operate (ATO).

Responsibilities

• Design and document security architecture for classified and unclassified information systems, aligned with RMF (NIST 800-37), ICD 503, and the applicable DoD and IC overlays.
• Carry out and review security assessments, keep systems patched, and run risk analysis and vulnerability scans with Nessus, ACAS, and SCAP to find and fix risk.
• Assess hardware, software, and firmware changes for security impact, then approve or reject them through the Configuration Management (CM) process.
• Lead the implementation and verification of STIG and SRG hardening on Windows, Linux, and network infrastructure.
• Triage findings from ACAS, SCAP, or equivalent scanners and drive fixes with the engineering teams that own the affected systems.
• Maintain the continuous monitoring strategy after ATO, tracking control effectiveness over time and flagging drift.
• Support incident response on accredited systems, including root-cause security analysis and reporting.
• Architect, design, implement, support, and evaluate security tools and services.
• Develop and interpret security policies and procedures.
• Secure cloud platforms running in production, as well as development, quality assurance, and staging environments.
• Ensure all assigned programs comply with DCSA, DSS, and relevant IC community security policies.

Requirements

• A Bachelor's degree plus 7 years of information assurance or information system security experience, or a Master's degree plus 5 years of relevant experience.
• DoD 8140 Cyber Workforce IAT Level 2 or IAM Level 1 certification.
• Strong knowledge of RMF, STIGs, system hardening, network security, secure architecture, and vulnerability management.
• Experience across hardware, software, networking, and mission system integration environments.
• Active Top Secret clearance with SCI eligibility.
• Preferred: experience supporting military aircraft, mission systems, CUAS, or tactical communication platforms.
• Preferred: background in cybersecurity test events, airworthiness, or platform accreditation activities.
• Preferred: strong knowledge of major cloud environments.

Conditions

This is an onsite role.

The base salary range is $150,000 to $190,000. It covers base pay only, excluding bonus, equity, and benefits, and the actual offer may vary based on experience, education, training, critical skills, and business needs.

Candidates whose pay expectations fall outside this range are still encouraged to apply.

Benefits

• Medical, dental, and vision benefits, 100% paid by the company.
• 401k with a 50% company match on contributions up to 6% of pay, plus FSA, HSA, and life insurance.
• Free daily lunch while working onsite, a fully stocked kitchen, unlimited PTO, and a casual dress code.
• Generous pre-IPO stock option grants.
• Relocation assistance.
• Annual bonuses, coming soon.