Principal Information Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal Information Security Engineer securing ASRC Federal’s DSOP platform for the U.S. Department of Defense. Assessing Kubernetes and containers, managing vulnerabilities, and integrating zero-trust controls across DevSecOps environments.
Responsibilities:
- Conduct container and Kubernetes security assessments
- Develop hardened configurations and STIG-aligned baselines
- Build and maintain security controls for container registries, images, and pipelines
- Perform vulnerability scanning, remediation tracking, and reporting
- Support RMF accreditation, continuous monitoring, and security engineering tasks
- Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
- Implement zero-trust security patterns and secure deployment workflows
- Manage secrets, certificate rotation, and identity enforcement
Requirements:
- 8–10+ years of cybersecurity or security engineering experience
- Active DoD Secret clearance or higher; candidates without at least a Secret clearance will not be considered
- Expertise with Kubernetes security, container scanning tools, and image hardening
- Bachelor’s degree in Computer Science, Engineering, or a technical discipline with an Information Security or Cyber Security concentration, or an advanced degree with such a concentration is preferred; alternatively, 4+ additional years of equivalent professional work experience
- Familiarity with DoD STIGs, RMF, ACAS, Nessus, and OpenSCAP
- Experience supporting secure cloud or platform environments
- Security certifications preferred, including Security+, CEH, CISSP, and CCSK
Benefits:
- Active DoD Secret clearance or higher is required for consideration
- Security certifications are preferred (Security+, CEH, CISSP, CCSK, etc.)
Similar Jobs
R&D Cybersecurity Engineer
Sentar cybersecurity engineer supporting DLA research and development efforts. Administering Okta infrastructure, operational systems, networking, automation, maintenance, and user support.
Visiting Professor, Cybersecurity
Online cybersecurity professor teaching undergraduate and graduate students at DeVry University. Developing course materials, assessing learning, and integrating responsible AI and applied security practices.
Cyber Security Engineer
Cyber Security Engineer building automated security capabilities for Interact’s enterprise intranet platform. Improving Splunk, cloud controls, and incident response through engineering and automation.
IT Cybersecurity Auditor
Cybersecurity Auditor conducting risk-based IT, security, and compliance audits for DiXiO, a global SWIFT financial messaging expert network. Assessing controls and reporting findings to clients.
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.
Security Advisor, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger cybersecurity postures. Assessing environments, recommending remediation, and coordinating technical issue resolution.
Senior Security Engineer
Senior Security Engineer securing AxisCare’s SaaS platform for home care agencies. Owning SOC 2 compliance, AWS infrastructure security, AI risk controls, and incident response.
Senior Security Specialist
Senior Security Specialist supporting SAIC’s defense and hypersonics mission. Developing security programs, classification guidance, training, access controls, and incident response.
Senior Security Engineer – Red Team
Senior Red Team Engineer securing Coupa’s AI-powered spend management platform. Testing web, mobile, API, and AI/LLM systems while developing autonomous security-testing agents.
CyberSecurity Consultant – Contractor
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading security architecture, integration, controls, and cybersecurity projects remotely in the United States.
CyberSecurity Consultant
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading architecture, integration, security controls, and cybersecurity strategy projects.
Cloud Security, IAM Architect
Microsoft Cloud Security/IAM Architect securing Dataverse and Dynamics environments for federal IT infrastructure. Designing identity controls, sensitive-data protections, auditing, monitoring, and incident-response documentation.
Staff AI Security Engineer
Staff AI Security Engineer securing Addepar’s global investment data and AI platform. Leading AI security architecture, guardrails, governance, automation, and organization-wide security initiatives.
Information Security Consultant – SMB
Information Security Consultant delivering GRC advisory services for Cognisys, a cybersecurity consultancy. Strengthening client governance, risk management and compliance across recognised security frameworks.
Security Engineer
Security Engineer securing AlertMedia’s risk intelligence and response SaaS platform. Improving AWS, application, compliance, monitoring, and customer security capabilities.
Staff Product Security Engineer
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy-now-pay-later platform. Designing secure, scalable CIAM backend systems and integrations.
Staff Product Security Engineer
Staff Product Security Engineer building CIAM backend services for Affirm’s buy-now-pay-later platform. Securing authentication, authorization, and account lifecycle flows at scale.
Application Security Consultant
Application Security Consultant advising inovex clients on secure architectures, SDLC, vulnerability management, and software supply-chain security. Developing trainings, reviewing applications, and advancing security consulting products.
Security Engineer
Palo Alto Networks Security Engineer optimizing NGFW security policies and Cortex XDR for Arctiq’s technology-services clients. Automating administration and troubleshooting complex network security issues.
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.