[Hiring] Cybersecurity Engineer @ISF

Role Description

ARRO is seeking a Cybersecurity Engineer (ISSE) to engineer and maintain security across our cloud platform, software delivery pipelines, and corporate environment. We build software that supports mission-critical defense and government operations, and this role sits at the center of how we secure it.

The work goes well beyond writing compliance artifacts or running tools. You'll need to understand how modern cloud applications and enterprise environments are built and deployed, dig into technical findings to determine what actually matters, and work side by side with the engineers who own the systems to get fixes shipped.

Reporting to the Director of Information Security, you will:

• Secure our Azure Government environment and CI/CD pipelines.
• Own the technical execution of continuous monitoring for our FedRAMP and DoD cloud authorization efforts.
• Secure our corporate network and drive CMMC Level 2 readiness.
• Help build a sustainable, company-wide security program.

Note: This role requires U.S. citizenship due to access to Controlled Unclassified Information (CUI). This is a remote, full-time position.

Qualifications

• 4+ years of hands-on experience in security engineering, cloud security, application security, or DevSecOps.
• Hands-on experience securing Microsoft Azure, including Entra ID, networking, Key Vault, logging, and Azure Policy.
• Experience securing enterprise IT environments, including identity, endpoints, and email and collaboration platforms.
• Working knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-171, NIST SP 800-37, DoD RMF, and DISA STIGs/SRGs.
• Experience integrating and tuning SAST, SCA, container, IaC, or secrets scanning in CI/CD pipelines.
• Understanding of modern software development, including APIs, containers, infrastructure-as-code, and secure development principles.
• Experience producing technical security documentation, such as control implementation narratives, assessment findings, or configuration evidence.
• Clear written and verbal communication, and the ability to work independently across security and engineering teams.
• U.S. citizenship and the ability to complete a background investigation and meet the personnel requirements applicable to DoD cloud systems.

Requirements

• Harden ARRO's Azure Government environment, including identity and access management, network segmentation, encryption, key and secrets management, and logging.
• Implement and validate controls against NIST SP 800-53 Rev. 5, FedRAMP baselines, the DoD CC SRG, and applicable DISA STIGs and SRGs.
• Integrate, tune, and maintain SAST, DAST, SCA, container, secrets, and IaC scanning in CI/CD pipelines.
• Review application architecture, APIs, authentication, authorization, dependencies, and data flows.
• Own the technical execution of ConMon for our authorization boundary.
• Author and maintain the technical portions of the System Security Plan (SSP).
• Run risk-based vulnerability management across cloud, corporate, and application environments.
• Secure ARRO's corporate IT environment, including identity, endpoints, email and collaboration platforms, and network infrastructure.
• Help build a sustainable, company-wide security program.
• Automate evidence collection, reporting, and security checks.
• Act as the go-to security engineering resource for Cloud Engineering, IT, Software Development, and Product.

Benefits

• Join at a pivotal stage with real influence over security architecture and engineering practices.
• Help build the technical foundation for our next stage of growth.
• Work directly with security and engineering leadership.

Company Description

ARRO delivers trusted software to the defense community. ARRO is an equal opportunity employer committed to building a collaborative and inclusive workplace.