← All roles

Security Authorization Specialist

Second Front Systems· Security
Apply on company site
Remote$150k - $175kFull-timePosted 6mo ago

About the role

Security Authorization Specialist to support DoD security authorization activities for Second Front Systems’ Game Warden platform and related systems, guiding authorization packages through the DoD RMF lifecycle and continuous monitoring, with heavy use of eMASS and DISA PPSM processes.

Responsibilities

  • Prepare, submit, and maintain security authorization packages for systems operating within Department of Defense environments.
  • Convert technical designs, operational processes, and security capabilities into accurate control implementation statements and supporting documentation.
  • Architect authorization records in eMASS, ensuring control responses, inherited controls, artifacts, assessment results, and system information remain complete and current.
  • Establish authorization timelines and coordinate activities across system owners, engineers, assessors, government sponsors, and cybersecurity leadership.
  • Organize evidence collection for control reviews, readiness activities, and formal assessments. Confirm that submitted materials directly address assessment objectives and accurately represent the system.
  • Review vulnerability scans, STIG checklists, configuration results, architecture diagrams, policies, and procedures to identify gaps before they affect an authorization decision.
  • Work with Product, Platform, DevSecOps, and Engineering teams to determine how cloud services, Kubernetes, containers, CI/CD pipelines, and supporting technologies satisfy security requirements.
  • Track assessment findings and POA&M items from identification through closure. Coordinate remediation plans, document risk decisions, validate corrective actions, and assemble closure evidence.
  • Manage the continuous monitoring cadence for assigned systems, including recurring control reviews, vulnerability reporting, patch status, IAVM compliance, POA&M reporting, and security posture updates.
  • Maintain accurate DISA PPSM records for system ports, protocols, services, and data flows. Reconcile registrations with the authorization boundary, network architecture, and applicable Category Assurance List requirements.

Qualifications

  • 5-7 years of experience supporting DoD security authorization, RMF, information assurance, security control assessment, or related cybersecurity compliance activities.
  • Direct involvement in preparing, assessing, or maintaining DoD authorization packages throughout the ATO and continuous monitoring lifecycle.
  • Hands-on proficiency with eMASS, including system registration, control documentation, artifact management, inheritance, assessment results, and package maintenance.
  • Practical experience with DISA PPSM and documenting ports, protocols, services, network boundaries, and system data flows.
  • Applied knowledge of NIST SP 800-37, NIST SP 800-53 Revision 4 or 5, DoD RMF, and related DoD authorization guidance.
  • Familiarity with DISA STIGs, STIG Viewer, SCAP Compliance Checker, ACAS, IAVM requirements, and the DISA Cloud Computing Security Requirements Guide; continuous monitoring expectations.
  • Strong technical writing skills for control implementation statements, SSPs, POA&Ms, assessment responses, and evidence packages.
  • Technical depth in cloud infrastructure, IAM, containerized workloads, Kubernetes, CI/CD, vulnerability management, and modern software delivery practices.
  • Ability to analyze technical implementations and evidence to identify control gaps and practical remediation steps.
  • Experience managing concurrent priorities, deadlines, findings, and stakeholder dependencies with attention to detail.
  • Clear communication skills coordinating among engineers, assessors, cybersecurity leaders, system owners, and government stakeholders.
  • Active DoD security clearance.

Skills

Required:Security authorizationeMASSNIST RMF & SP 800-37/53Documentation & technical writing

Benefits

  • Competitive salary
  • 100% employer-paid medical, dental, and vision coverage for you and dependents
  • 401(k) with a 3% company contribution
  • Wellness benefits including One Medical membership, mental health resources, family planning support, and more
  • Equity incentive plan
  • New hire technology and home office stipend
  • Annual professional development stipend
  • Flexible paid time off plus federal holidays
  • Generous parental leave
  • Flexible remote work opportunities
  • Employee referral bonus program
Last updated Oct 14, 2026. Interested? Apply on the company site.
Second Front Systems logo

About Second Front Systems

Powering software for the free world.

Discover a better path to ATO. Leverage Second Front’s accredited software platform to fast-track securing authorization for government use of your SaaS software.

softwaregovernmentsecurityaccreditationSaaScompliancecloud
Company profileWebsite

More open roles at Second Front Systems