Senior Security Engineer (Cleared)

Rise8 is seeking a Senior Security Engineer (Cleared) to own security engineering across the build pipeline and authorization package for multiple teams and program domains. In this role, you will design and harden cloud infrastructure and CI/CD, translate regulatory frameworks into automatable checks, and drive continuous ATO adoption with evidence gathering that reduces risk.

This position is based in Los Angeles, CA and is onsite, with an annual salary range of USD 143,824 - 179,780. A minimum of 6 years of relevant experience is required.

Responsibilities

• Own CI/CD pipelines delivering production software across teams, including build integrity, SLSA artifact signing, and least-privilege pipeline credentials.
• Define secure “golden path” patterns and landing zone architectures across AWS GovCloud and Azure GCC High, enforcing Zero Trust principles in code.
• Secure the software supply chain through dependency scanning, secret detection, SBOM generation, provenance verification, and pinned build actions.
• Harden container and orchestration layers from base image selection through admission control policies using Kyverno and OPA Gatekeeper.
• Translate whole control frameworks into technical checks by building implementations for NIST 800-53, CMMC, FedRAMP, and DISA CC SRG.
• Determine where control gates sit and what they block so changes that break controls fail builds automatically before assessment.
• Threat model complex distributed systems and carry mitigations into running code and automated guardrails.
• Build and lead adoption of agentic/AI-driven security tooling across teams, applying engineering judgment to AI safety and utility.
• Own the program evidence system by establishing continuous collection from cloud APIs, CI/CD runners, and scanner feeds so posture is derived from live data.
• Author control implementation statements and manage inherited-versus-owned boundaries at a quality level assessors accept without rework.
• Drive Continuous RMF and cATO practices, keeping security posture reportable on demand and maintaining real-time POA&M status.
• Implement unified control libraries so a single technical check can satisfy NIST 800-53, SOC 2, and ISO 27001 simultaneously.
• Train and mentor security engineers to foster growth within the practice.

Requirements

• 6–10 years of experience in cloud/platform operations, DevSecOps, or security engineering.
• Deep technical fluency in the security surface of major cloud platforms, including where defaults are insecure in AWS GovCloud and Azure GCC High.
• Hands-on pipeline construction experience building and hardening production CI/CD platforms.
• Infrastructure as Code as a standard method for managing infrastructure and security controls, specifically Terraform.
• Direct experience applying NIST 800-53, FedRAMP, and CMMC to real production systems.
• Strong programming capability in Python, Go, or Rust to build custom security tools, admission controllers, and evidence pipelines.
• Ability to communicate control requirements to developers and pipeline gates to assessors with shared technical precision.

Technologies

• SLSA artifact signing, AWS GovCloud, Azure GCC High, Zero Trust
• Dependency scanning, secret detection, SBOM generation, provenance verification, pinned build actions
• Kyverno, OPA Gatekeeper
• NIST 800-53, CMMC, FedRAMP, DISA CC SRG
• Terraform, Python, Go, Rust
• SOC 2, ISO 27001
• Continuous RMF, cATO, POA&M, CI/CD, SLSA, SBOM
• Agentic/AI-driven security tooling, cloud APIs, CI/CD runners

Benefits

• Flexible schedule within a 100% distributed workforce
• Premium Insurance: Rise8 covers up to 100% of employee premium and up to 80% of combined dependent premium on the base health plan, depending on pay band
• Rise8 covers 100% of Dental and Vision premiums for employees and dependents, and employee premiums for Life and Disability
• 401k match at 10% gross pay
• PTO: 4 weeks combined accrued vacation and sick leave, 11 Federal holidays, your birthday, jury duty, and bereavement
• Education & Training: up to $3,500 per year for classes, travel, events, and materials
• Home Office and Merch: $750 per year for home office technology and equipment and $100 per year for Rise8 merch
• Wellness Budget: 100% reimbursement up to $500 per calendar year
• Participation in Life Time Corporate Partner program (includes a $75 monthly Life Time membership credit option)
• Equipment: MacBook Pro

Certifications & DoD 8140 Compliance

• Rise8 Standard: no certification required to interview or receive an offer; evaluation focuses on practical engineering capabilities, code delivery, and compliance problem-solving.
• Contract requirements: specific customer engagements and DoD programs may require an approved baseline certification (for example, DoD 8140.03 / 8570.01-M) to obtain elevated administrative privileges or customer enclave access.
• Candidates already holding an applicable certification will be eligible for immediate deployment to those contracts.
• For candidates hired without one, Rise8 will support and sponsor obtaining the required credential if assigned to a billable role that mandates it.
• Relevant baseline credentials include CISSP, CKS, CCSP, AWS Security – Specialty, Red Hat RHCE, GIAC (GSLC/GCIH), or equivalents (aligned to DoD IAT Level III / CSSP / IAM Level III).

Additional Information

• Travel may be required up to 25% to support contract performance, customer site visits, and program activities.
• Rise8 works with Federal Government customers requiring employees involved with projects to be U.S. citizens; this role requires U.S. citizenship.
• If hired, you would be required to go through a background investigation.
• Salary range applies regardless of final candidate location within the United States; final level and compensation are determined based on education, qualifications, knowledge, skills, ability, experience, and internal calibration.