[Hiring] Cybersecurity Assessment Engineer @Second Front Systems

Role Description

Second Front Systems (2F) is looking for a battle-tested, high-agency Cybersecurity Assessment Engineer to support our team. We sit at the high-stakes intersection of defense tech and national security, and this role is about building a modern, resilient operations function from the ground up. You’ll be protecting the infrastructure and platforms that power mission-critical software for the free world—ensuring our nation’s defenders have the secure environment they need to move fast.

As a Cybersecurity Assessment Engineer at Second Front Systems, you will help ensure that Game Warden maintains a strong security posture. You will work hand-in-hand with the DevOps Engineering and Mission Success teams to oversee the software vulnerability scanning process, review vulnerability scan results, assist the customers in understanding those results, and make approval recommendations for vulnerabilities that can't be immediately resolved. This role will require learning new things like researching identified vulnerabilities, assessing risk, solving big problems, speaking your mind, and contributing to a culture of diversity, innovation, and excellence. This role is key to the security of our cloud platform and of the customer applications running on it.

Note: Candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia
• Raleigh/Durham/Chapel Hill, NC
• Denver/Colorado Springs, CO
• Dallas/Fort Worth, TX

Qualifications

• Experience solving complex and sometimes ill-defined problems
• Intermediate knowledge of DevSecOps tools and software development
• Ability to create and implement incident response plans
• Background in cybersecurity and understanding of vulnerability risk analysis
• Hands-on experience assessing or securing services within AWS, Azure, or GCP, particularly within PaaS or Kubernetes-based environments
• Proficient knowledge of NIST SP 800-37 (RMF) and NIST SP 800-53 rev 5 security controls
• Deep understanding of the FedRAMP authorization process and Department of Defense (DoD) security standards
• 3-5 years of relevant experience
• Ability to attain DOD 8570 Baseline Certification for IAT II within 6 months of hire date (preferably CYSA+)

Requirements

• Extensive experience with Department of Defense DevSecOps practices, policies, and security
• Experience with Docker, Gitlab, Kubernetes, Anchore, or other container scanning tools
• Ability to write basic scripts (Python, Bash, etc.) to automate evidence collection or data parsing
• Strong interest in matters of national security
• Having a Secret clearance is preferred

Benefits

• Competitive Salary
• 100% Healthcare, vision and dental coverage
• 401(k) + 3% company contribution
• Wellness perks (Fitness classes, mental health resources)
• Equity incentive plan
• Tech + office supplies stipend
• Annual professional development stipend
• Flexible paid time off + federal holidays off
• Parental leave
• Work from anywhere
• Referral Bonus

Company Description

Second Front Systems (2F) is a public-benefit software company powering software for the free world. We eliminate the friction that slows innovation, enabling faster, more secure development and deployment of software across government and regulated networks. Built by national security veterans and backed by top-tier venture capital, our platform is trusted by the world’s leading organizations to cut deployment timelines from years to weeks. We move fast, solve hard problems, and deliver trusted capabilities where they’re needed most. Our work strengthens global security and gives the United States and its allies a lasting competitive advantage.