Cybersecurity Assessment Engineer
Second Front Systems · Remote · Remote ·
COMPENSATION
$155k – $175k
Listed on the employer's job board (Ashby)
- Fully remote (US hubs)
- AWS + Kubernetes
- Public Trust required
- $155k-$175k base
- Senior level
Join Second Front Systems as a Cybersecurity Assessment Engineer to perform hands-on security evaluations of applications deployed via the Game Warden platform. You will investigate technical findings, distinguish real risks from scanner noise, and provide actionable remediation guidance to engineering teams.
Reporting to the Head of Product Security & Compliance, you will assess container images, cloud configurations, and dependencies. Your work directly influences deployment decisions and the security posture of mission-critical government software.
What you'll do
- Perform technical security assessments of customer applications and services.
- Review artifacts, container images, APIs, and infrastructure for weaknesses.
- Analyze results from SAST, DAST, and container scanning tools.
- Partner with engineering teams to identify vulnerabilities and evaluate risk.
- Provide clear remediation guidance and specific corrective actions.
- Validate vulnerability exceptions and document risk recommendations.
- Support continuous monitoring by identifying new vulnerabilities and drift.
- Communicate assessment results to technical and non-technical stakeholders.
What you'll need
- 5-7 years experience in application or cloud security.
- Strong knowledge of OWASP Top 10 and cloud vulnerabilities.
- Hands-on experience with AWS, Azure, or Google Cloud.
- Working knowledge of Docker, Kubernetes, and CI/CD pipelines.
- Experience with SAST, DAST, and vulnerability management tools.
- Ability to interpret CVEs, CVSS vectors, and exploit information.
- Knowledge of NIST SP 800-53 and government authorization programs.
- Must be able to obtain and maintain a Public Trust determination.
Nice to have
- Experience with FedRAMP Moderate/High or DoD RMF.
- Familiarity with GitLab, Terraform, Anchore, or Trivy.
- Certifications like Security+, CSSLP, or AWS Certified Security.
- Experience securing multi-tenant cloud services.
- Background in working with software development teams.
Stack
- AWS
- Docker
- Kubernetes
- Terraform
- GitLab
- Anchore
- Trivy
- Tenable
How you'll work
- Full-time position.
- Must reside in DC/MD/VA, Raleigh/Durham, Denver, or Dallas/Fort Worth.
- Flexible remote work opportunities within approved hubs.
- Requires Public Trust clearance eligibility.
What you get
- Base salary between $155,000 and $175,000.
- 100% employer-paid medical, dental, and vision coverage.
- 401(k) with 3% company contribution.
- Equity incentive plan and discretionary bonuses.
- New hire technology and home office stipend.
- Annual professional development stipend.
- Flexible paid time off and federal holidays.
- Generous parental leave.