Bachelor's degree plus 7 years of Information Assurance/Information System Security experience or Master's degree with 5 years of relevant experience.
DoD 8140 Cyber Workforce IAT Level 2 or IAM Level 1 certification required.
Strong knowledge of RMF, STIGs, system hardening, and vulnerability management processes.
Experience across hardware, software, networking, and mission system integration environments.
Active Top Secret Clearance with SCI eligibility.
Responsibilities
Design and document security architecture for classified and unclassified systems, ensuring compliance with RMF and DoD standards.
Conduct security assessments and maintain system patches, risk analysis, and vulnerability scans to identify and remediate risks.
Evaluate hardware, software, and firmware changes for security impact and manage approvals through the Configuration Management process.
Oversee implementation of STIG/SRG hardening requirements across various platforms.
Run vulnerability scans, triage findings, and drive remediation efforts with engineering teams.
Maintain continuous monitoring strategy post-ATO, tracking control effectiveness and flagging drift.
Support incident response for accredited systems, including root-cause analysis and reporting.
Benefits
100% company-paid medical, dental, and vision benefits.
401k with 50% company match up to 6% of pay, FSA, HSA, and life insurance.
Free daily lunch while onsite, fully-stocked kitchen, and unlimited PTO.
Competitive base salaries with generous pre-IPO stock option grants and relocation assistance.
Growing team with over 500 employees across 5 global offices.
Full Job Description
Role Overview:
CHAOS Industries seeks an experienced Information System Security Engineer (ISSE) to serve as the primary security engineer for classified Information systems across one or more Program Security Authorization boundaries. The ISSE will take full ownership of the security engineering effort for our next generation classified processing environment - from initial system security architecture through Assessment and Authorization (A&A) and into sustained continuous monitoring once the system reaches Authority to Operate (ATO).
Responsibilities:
Security Engineering & Architecture:
Design and document system security architecture for classified and unclassified Information Systems, ensuring alignment with RMF (NIST 800-37), ICD 503, and applicable DoD/IC overlays.
Conduct and review security assessments, maintain system patches, risk analysis, and vulnerability scans (Nessus, ACAS, SCAP) to identify and remediate risks.
Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.
Oversee implementation and validation of STIG/SRG hardening requirements across Windows, Linux, and network infrastructure.
Vulnerability Management and Continuous Monitoring:
Run and interpret vulnerability scans (ACAS, SCAP or equivalent tools), triage findings, and drive remediation with the responsible engineering teams.
Maintain the system's continuous monitoring strategy post- ATO, including tracking control effectiveness overtime and flagging drift.
Support incident response for accredited systems, including root-cause security analysis and reporting.
Assessment & Authorization (A&A):
Architect, design, implement, support, and evaluate, security-focused tools, and services.
Develop and interpret security policies and procedures.
Experience with cloud security platforms in a production environment, as well as development, quality-assurance and staging environments.
Ensure compliance with DCSA, DSS, and applicable IC community security policies across all assigned programs.
Minimum Requirements:
Minimum Bachelor's degree plus 7 years of Information Assurance / Information System Security experience.
Master's degree and 5 years of relevant experience.
Possess a DoD 8140 Cyber Workforce IAT Level 2 or IAM level 1 certification
Strong knowledge of RMF, STIGs, system hardening, network security, secure architecture, and vulnerability management processes.
Experience working across hardware, software, networking, and mission system integration environments.
Active Top Secret Clearance with SCI eligibility
Preferred Requirements:
Experience supporting military aircraft, mission systems, CUAS, or tactical communication platforms.
Background supporting cybersecurity test events, airworthiness, or platform accreditation activities.
Strong knowledge in major cloud environments.
Why CHAOS?
Health Benefits: Medical, dental, and vision benefits 100% paid for by the company
Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more
Our Perks: Free daily lunch while you're working onsite, fully-stocked kitchen, unlimited PTO, casual dress code
Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses
Team Growth: 500+ employees and counting across 5 global offices
$150,000 - $190,000
The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations.
Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.
