Cybersecurity Engineer

About Zaden Technologies, Inc.Join Zaden Technologies on our mission to simplify the delivery and improve the utility of software products for our customers. At Zaden, we believe that our employees are our greatest assets. We hire the right candidates with the right skill sets who fit our culture of customer obsession, innovation, and continuous learning. We are our customer’s biggest advocate and we are looking for like-minded individuals who encompass these same ideals. It is important to us to offer you competitive pay and comprehensive benefits with opportunities that match your life and propel your career! Zaden Technologies is looking for a Cybersecurity Engineer with a strong ISSO background who's ready to grow into the DevOps side of security. You'll keep the systems you support secure and authorized by managing RMF packages, running continuous monitoring, hardening environments and driving vulnerabilities to closure. You'll also work alongside our DevSecOps engineers to learn how security gets built into pipelines, containers and cloud infrastructure, and you'll help us replace manual compliance work with automation. If you're a hands-on security professional who's curious about automation and excited to expand your technical toolkit, we'd love to help you grow as we automate a smarter future.Role Responsibilities:Perform ISSO duties for assigned systems, maintaining their security posture throughout the RMF lifecycleDevelop and maintain authorization artifacts, including System Security Plans, POA&Ms, risk assessments and incident response plansImplement and validate security controls, and support assessors through the authorization processConduct vulnerability scanning, audit log review and STIG compliance checks, and work with system owners to remediate findingsHarden operating systems, applications and network components to STIG and SRG baselinesCollaborate with DevSecOps engineers to integrate security tooling into CI/CD pipelines and translate control requirements into technical solutionsLearn and apply DevOps practices such as containerization, Infrastructure-as-Code and scripting to automate compliance evidence collectionIdentify repeatable manual security tasks and work with the team to automate themInvestigate and document security incidents, and report findings to leadership and stakeholdersKeep up with emerging threats and evolving cybersecurity policy, and recommend improvements to Zaden's security practicesRequired Qualifications:U.S. Citizenship and active security clearance (minimum secret)3+ years of cybersecurity experience, including hands-on work as an ISSO or in an equivalent information assurance roleWorking knowledge of the Risk Management Framework (RMF) and NIST SP 800-53 security controlsExperience preparing and maintaining authorization packages, including SSPs and POA&MsExperience with vulnerability scanning and compliance tools such as ACAS/Nessus, SCAP Compliance Checker or STIG ViewerHands-on experience hardening Linux or Windows systemsStrong written communication skills for security documentation and reportingA genuine interest in learning DevOps tools and practices, and the motivation to build those skills on the jobDoD 8140/8570 IAT Level II certification (e.g., CompTIA Security+) or ability to obtain within 6 months of hirePreferred Qualifications:Experience with eMASS or similar GRC platformsExposure to CI/CD tools such as GitLab CI, GitHub Actions or JenkinsExposure to containers or orchestration tools such as Docker or KubernetesBasic scripting experience in Bash, Python or PowerShellFamiliarity with cloud platforms such as AWS or Azure and their native security servicesExperience with SIEM platforms such as Splunk or ElasticFamiliarity with zero trust architecture principlesAdvanced certification such as CISSP, CISM or CASP+