Security Assessment And Authorization

Security Assessment And Authorization Engineer Jobs

2 jobs found

11d ago

Sr. Software Engineer - Platform Permissions

AppFolio Inc San Francisco, CA

San Francisco, CA

11d ago

$138k - $190k/yr Full time Backend Developer Senior Engineering

Apply Now

Job Description

The Senior Software Engineer on the Permissions team will build an authorization platform that determines who can perform actions across AppFolio’s products. The role emphasizes scalable access control design, dependable permission-check performance, and migration of older permissions logic to a modern platform.

Role Overview

You will design and operate the authorization platform that provides roles, policies, and access checks for other engineering teams. This includes setting performance and availability goals for permission checks, building reusable access-control interfaces and tooling, and ensuring authorization changes ship safely through testing, controlled rollouts, and observability.

Responsibilities

Design, build, and operate the authorization platform, including roles, policies, and access checks that other teams rely on
Improve the speed and reliability of permission checks as usage grows, and establish performance and availability targets to sustain those outcomes
Build interfaces, libraries, and tooling that help other engineering teams add access control to their features quickly and safely
Lead migration of legacy, hard-to-maintain permissions logic to the modern authorization platform to reduce risk and complexity
Contribute to raising the technical bar through thoughtful design reviews, pragmatic code review, and clear written proposals
Mentor engineers and partner with product, security, and engineering teams to convert ambiguous access-control needs into clear systems
Own end-to-end quality for authorization changes using automated testing, feature-flag rollouts, and observability

Requirements

7+ years of professional software engineering experience building and operating production systems
Fluency with AI coding agents, including experience with available agents, understanding common concepts, and willingness to learn and apply AI for development work
Depth in one or more of the following: Ruby on Rails, Go, or React with TypeScript, or the ability and desire to become effective in them quickly
Experience designing and owning non-trivial platform systems end-to-end
Ability to work across the stack, including backend services and customer-facing interfaces, and adopt new languages and tools as needed
Experience diagnosing and improving performance and reliability in systems handling high request volumes
Strong drive to address root causes and reduce unnecessary complexity rather than applying temporary fixes
Experience with authorization, authentication, or other security-sensitive systems is a plus
Proactive and clear communication in writing and conversation, including explaining technical trade-offs to engineers and non-engineers
Collaborative approach across the team and org-wide, providing and receiving feedback and supporting others’ success
Prioritization of team delivery over individual productivity

Technologies

Ruby on Rails
Go
React
TypeScript

Location

San Francisco, CA (onsite)

Find out more about locations by visiting the company site. All late-stage candidates complete an in-person meeting with an AppFolian as part of the hiring process.

Compensation & Benefits

The base salary range for this role is $138,400 - $190,300 per year.
The actual base salary will be determined based on factors including skills, education, and experience.
Base pay is one element of a Total Rewards package and may not include other benefits or bonuses/commissions based on role and employment type.
Regular full-time employees are eligible for benefits.

View full job page →

1mo ago

Information Systems Security Engineer

Booz Allen Hamilton Reston, VA

Reston, VA

1mo ago Closed

$99k - $225k/yr Full time Cloud Security Assurance Cyber Security Identity and Access Management

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

In this Information Systems Security Engineer role, you will design, implement, and evaluate security controls for cloud-hosted information systems across the full lifecycle. You will work with cloud, cybersecurity, risk management, and assessment and authorization stakeholders to convert security requirements into practical technical designs and to support authorization decisions.

Location and Work Model

Reston, VA (onsite)

Key Responsibilities

Engineer, implement, and assess security controls for cloud-hosted information systems in alignment with RMF, ICD 503, NIST guidance, and assessment and authorization requirements.
Translate security requirements, system architectures, data flows, and mission use cases into technical controls and documented security designs.
Develop and maintain A&A artifacts, including system security plans, control implementation statements, architecture diagrams, security assessment plans and procedures, POA&Ms, continuous-monitoring plans, and evidence packages.
Assess control implementation and effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
Apply security engineering practices including Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration.
Perform security engineering activities across the system lifecycle, including requirements analysis, architecture reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition.
Support security assessments, authorization decisions, control validation, audit readiness, and continuous-monitoring efforts.
Communicate security risks, decisions, compliance status, remediation plans, and technical recommendations to program stakeholders.

Required Qualifications

8+ years of experience in information systems security engineering, cloud security, or cybersecurity.
Experience engineering, implementing, and assessing security controls for cloud-hosted information systems using RMF, ICD 503, NIST guidance, and assessment and authorization processes.
Experience securing cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, secrets management, and privileged-access capabilities.
Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and security designs.
Experience developing and maintaining A&A artifacts, including system security plans, control implementation statements, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages.
Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configuration practices.
Experience performing security engineering across the system lifecycle.
Ability to assess control effectiveness, identify security gaps and residual risk, recommend remediation, and track corrective actions to closure.
TS/SCI clearance; willingness to take a polygraph exam.
Bachelor’s degree.

Technologies

RMF, ICD 503, NIST
Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability
Terraform, OCI Resource Manager, Ansible
SIEM, SOAR

Nice If You Have

Experience supporting classified, Government, or highly regulated information systems.
Experience with vulnerability management, configuration compliance, SIEM, SOAR, endpoint security, or cloud security posture management tools.
Experience with infrastructure as code and automated security configuration using Terraform, OCI Resource Manager, Ansible, APIs, or scripting.
Experience supporting authorization packages, control validation, audit readiness, remediation tracking, or continuous monitoring in an agency environment.
Strong written and verbal communication skills.
Associate or Professional level security, architecture, networking, or cloud operations certification.

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs
Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits

Identity Verification and Interview Requirements

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

The use of artificial intelligence (AI) or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model Details

Onsite: work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

View full job page →

Security Assessment And Authorization Engineer Jobs

Sr. Software Engineer - Platform Permissions

Information Systems Security Engineer

Get Security Assessment And Authorization Engineer Jobs alerts