8+ years of RMF experience as an ISSE, ISSO, or security engineer.
Hands-on experience building authorization packages.
DoD 8570/8140 IAM or IAT baseline certification required.
Experience with Xacta is preferred.
Familiarity with securing cloud-native or containerized systems is a plus.
Current on-site work experience in an Intelligence Community environment is advantageous.
Responsibilities
Define authorization boundaries and trust relationships, tailoring security controls accordingly.
Map control implementation to evidence and identify inherited controls.
Support the GRC process, preparing POA&M entries and coordinating security assessments.
Validate remediation efforts and assemble authorization and IOC decision packages.
Review container and release security evidence with the DevSecOps team.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
Parking reimbursement.
Full Job Description
About the Role
Apavo is hiring an ISSE to build cybersecurity into the delivery of new AI capabilities for an Intelligence Community customer. You'll work alongside engineers from the start, so security and authorization keep pace with development.
What You'll Do
Define authorization boundaries and trust relationships, and tailor security controls.
Map control implementation to evidence and identify inherited controls.
Support the GRC process (Xacta or similar), prepare POA&M entries, and coordinate security assessments.
Validate remediation and assemble authorization and IOC decision packages.
Review container and release security evidence (SBOMs, vulnerability scans, STIG findings) with the DevSecOps team.
Requirements
Required Qualifications
Active TS/SCI clearance.
8+ years of RMF experience as an ISSE, ISSO, or security engineer.
Hands-on experience building authorization packages.
A DoD 8570/8140 IAM or IAT baseline certification.
Preferred Qualifications
Xacta experience.
Experience securing cloud-native or containerized systems.
Current on-site work in an IC customer space.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
