Authorization To Operate

Authorization To Operate Engineer Jobs

3 jobs found

1d ago

Senior AI Engineer

Leidos Linthicum Heights, MD

Linthicum Heights, MD

1d ago

$108k - $195k/yr Full time Senior Agile Methodologies Agile Scrum

Apply Now

Job Description

Leidos’ Intel Sector is seeking a Senior AI Engineer to support an AI and Emerging Technologies mission. This onsite role in Linthicum Heights, MD focuses on building practical AI/ML capabilities that help strengthen vulnerability identification and mitigation. The position supports the development and integration of LLM tooling, including fine-tuning, plus orchestration and RAG-related engineering for mission systems.

Pay range: USD 107,900 - 195,050 per year. Schedule: Flexible Schedules. Clearance: Active TS/SCI with Polygraph required.

What you will do

Partner with technical leadership to design, develop, and maintain LLM orchestration frameworks that coordinate static analyzers, retrieval-augmented generation (RAG) systems, and automated testing pipelines.
Build and optimize data preprocessing pipelines to ingest, clean, transform, and vectorize product documentation, source code, and test results for LLM consumption.
Design and implement database solutions to support RAG architectures, including artifact storage, audit trails, and metadata management.
Work with systems engineers to architect and deploy networked AI tools within secure enclaves, and perform performance profiling, optimization, and scalability analysis for mission systems.
Support security assessments and authority to operate (ATO) processes.
Apply AI/ML to develop tools and techniques that include fine-tuning Large Language Models (LLM) for enhanced vulnerability identification and mitigation capabilities.

Required qualifications

Bachelor’s degree plus eight (8) years of relevant experience, or equivalent.
Proficiency in Python, LLM integration, and data engineering.
Experience with static analyzers, RAG frameworks, and relational and vector databases.
Familiarization with Agile, Git, Jira, and Confluence.
Active TS/SCI with Polygraph required.

Beneficial skills and tools

Familiarization with RUST, Claude Code, Codex, and CI/CD.

Education, training, and time off

Paid Time Off
11 paid Holidays
Technical Upskilling
Education and Training Support
Parental Paid Leave

Additional benefits

401K with a 6% company match and immediate vesting
Flexible Schedules
Discounted Stock Purchase Plans
Competitive benefits

Data security and application safety

Leidos will never ask you to provide payment-related information during the hiring process and will not advance money (for example, by sending a check or money order) as part of employment consideration.
Leidos will only communicate through emails generated by the Leidos.com automated system, not through free commercial email services or messaging apps.
If you receive a suspicious email requesting payment or personal information, email LeidosCareersFraud@leidos.com.
If you believe you are a victim of a scam, contact local law enforcement and report to the U.S. Federal Trade Commission.

Non-discrimination: Leidos provides equal employment consideration without regard to protected characteristics, and will also consider applicants with criminal histories consistent with applicable law.

View full job page →

6d ago

Senior Cybersecurity Engineer - RMF/ISSE Lead

CACI Sterling, VA

Sterling, VA

6d ago

$104k - $218k/yr Full time Manager Senior Application Security

Apply Now

Job Description

The Senior Cybersecurity Engineer - RMF/ISSE Lead will support a division focused on safeguarding Electronic Warfare systems by guiding security posture across the system lifecycle. This onsite role in Sterling, VA includes leading Risk Management Framework (RMF) execution, supervising Security Engineers, and ensuring Assessment & Authorization (A&A) documentation and continuous monitoring requirements are met.

Key Responsibilities

Lead, mentor, and manage a team of 3-5 Security Engineers, including oversight of project timelines, delivery of high-quality security solutions, performance evaluations, and professional development opportunities.
Direct design and documentation of secure system architectures spanning web applications, application stacks, Web Application Firewalls (WAFs), Intrusion Detection/Prevention Sensors (IDS/IPS), antimalware technologies, and Advanced Persistent Threat (APT) prevention.
Define security requirements and integrate security capabilities across all SDLC phases, including initiation, acquisition/development, implementation, operations/maintenance, and disposition, aligned to NIST 800-64 Rev. 2 guidance.
Manage and execute RMF activities (Steps 1-6), performing ISSO/ISSE functions to support system progress from initial categorization through Authorization to Operate (ATO).
Support DoD or IC acquisition programs, contributing to outcomes such as IATT and/or ATO.
Develop, maintain, and review Assessment & Authorization (A&A) documentation using Xacta, eMASS, or equivalent tools, including artifacts such as SSP, SCTM, and BoE.
Ensure compliance of hardware and software with Government Security Certification Officer (SCO) requirements and standards including NIST SP 800-53, ICD 503, and CNSSI 1253.
Implement continuous monitoring (ConMon) and lead security audits using IC and DoD approved scanning tools such as Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap, and additional vulnerability assessment platforms.
Direct incident response activities and participate in an on-call rotation for security incidents.

Required Qualifications

Bachelor’s degree in computer science, cybersecurity, engineering, information technology, or a related field (or equivalent experience).
10+ years of experience with demonstrated ISSE/ISSO responsibilities, preferably in the Intelligence Community or DoD environment.
Experience achieving IATT and/or ATO on DoD or IC acquisition programs.
People management or team leadership experience.
Current active TS/SCI eligibility.
DoD 8570/8140 IASAE Level III (e.g., CISSP).
Knowledge of RMF processes and NIST SP 800-53 and NIST 800-64 Rev. 2.
Experience integrating security across the SDLC phases: initiation, acquisition/development, implementation, operations/maintenance, and disposition.
Working knowledge of network protocols (TCP/IP, DNS, HTTP/HTTPS), VPNs, IDS/IPS, firewalls, and DMZ configurations.
Hands-on Linux/Unix experience.
Experience with web applications, application stacks, WAFs, and application-layer security controls.
Experience with A&A tracking tools such as Xacta or eMASS, plus SCAP/SCC and vulnerability assessment tools including Nessus and ACAS.

Technology Stack

Risk Management Framework (RMF)
NIST 800-64 Rev. 2
NIST SP 800-53
ICD 503
CNSSI 1253
ISSO/ISSE
IATT and Authorization to Operate (ATO)
Xacta, eMASS, SSP, SCTM, BoE
Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap
Linux/Unix
TCP/IP, DNS, HTTP/HTTPS, VPNs, IDS/IPS, firewalls, DMZ configurations
Web Application Firewalls (WAFs), Web applications, antimalware technologies, APT prevention

Travel Requirements

Percentage of Travel Required: Up to 10%
Type of Travel: Local

Clearance & Certifications

Current active TS/SCI eligibility
DoD 8570/8140 IASAE Level III (e.g., CISSP)

Compensation

The proposed salary range for this position is $103,800 - $218,100 per year.

Benefits

Flexible time off benefit
Robust learning resources
Healthcare
Wellness
Financial benefits
Retirement
Family support
Continuing education
Time off benefits

View full job page →

6d ago

Information System Security Engineer

MANTECH Washington, DC

Washington, DC

6d ago

Full time Authorization To Operate Cybersecurity Tools Ibm Guardium

Apply Now

Job Description

MANTECH is seeking an Information System Security Engineer (ISSE) to help identify, design, and implement cybersecurity requirements for an IS and Network Environment. This role focuses on translating applicable security needs into architectures, security measures, and implementable designs, while supporting mission outcomes in a networked environment.

The position is based in Washington, DC and is onsite. The work requires a current/active Top Secret clearance with SCI eligibility, along with willingness to complete a polygraph.

Responsibilities

Identify information protection needs for an IS and Network Environment, and define IS and network security requirements in line with applicable cybersecurity requirements.
Design security architectures for use within the IS and Network Environment, including cybersecurity-enabled products that support those environments.
Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment.
Develop and implement security designs for new or existing network system(s), ensuring hardware, operating systems, and software applications address cybersecurity requirements.
Design, develop, and implement network security measures to provide confidentiality, integrity, availability, authentication, and non-repudiation, including cybersecurity countermeasures for the IS and Network Environment.
Develop interface specifications for the IS and Network Environment.
Develop approaches to mitigate IS and Network Environment vulnerabilities and recommend changes to network or network system components as needed.
Ensure that network system(s) designs support incorporation of FBI directed cybersecurity vulnerability solutions.

Requirements

Experience level requirement (must meet one): High school diploma/GED and 14 years, Associate’s degree and 7 years, Bachelor’s degree and five years, or Master’s degree and 3 years.
Hold at least one of the following certifications: CISSP (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, CSSLP, CISSP-ISSEP, or CISSP-ISSAP.
Familiarity with security tools and usage, including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), or similar applications.
Working knowledge of NIST Risk Management Framework (RMF) and ATO processes.
Must have a current/active Top Secret security clearance with eligibility to obtain SCI prior to starting.
Selected candidate must be willing to undergo a Polygraph.

Technologies

Cross Domain Solutions (CDS)
Tenable Nessus
Security Center
IBM Guardium
HP WeblInspect
Network Mapper (NMAP)
NIST Risk Management Framework (RMF)
ATO processes

Preferred Qualifications

Degree in Computer Science, Cybersecurity, or other cyber discipline.

Physical Requirements

Must be able to remain in a stationary position 50%.
Needs to occasionally move about inside the office to access file cabinets, office machinery, and related materials.
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
Often positions self to maintain computers in the lab, including under desks and in the server closet.
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information in these situations.

View full job page →

Authorization To Operate Engineer Jobs

Senior AI Engineer

Senior Cybersecurity Engineer - RMF/ISSE Lead

Information System Security Engineer

Get Authorization To Operate Engineer Jobs alerts