← All roles

Cybersecurity Assessment Engineer

Second Front Systems· Security
Apply on company site
Remote$155k - $175k + equity + bonusFull-timePosted 3mo ago

About the role

Cybersecurity Assessment Engineer to perform hands-on security assessments of software deployed through the Game Warden platform, influencing deployment decisions, remediation, and continuous monitoring for mission-critical government software.

Responsibilities

  • Perform technical security assessments of customer applications and services seeking deployment through the Game Warden platform.
  • Review application artifacts, container images, software dependencies, infrastructure configurations, data flows, APIs, and deployment documentation to identify security weaknesses.
  • Analyze results from SAST, DAST, software composition analysis, container scanning, infrastructure-as-code scanning, secrets detection, and vulnerability management tools.
  • Serve as a trusted technical security partner to Mission Success, Platform Engineering, DevOps, and customer development teams.
  • Partner with Security Authorization Specialists to ensure technical assessment results and evidence can be used for RMF, FedRAMP, and continuous monitoring activities.
  • Provide developers with clear remediation guidance identifying vulnerable components, risk, and corrective actions.
  • Evaluate requests for vulnerability exceptions or delayed remediation with risk recommendations.
  • Support recurring continuous monitoring reviews by identifying new vulnerabilities, configuration drift, outdated dependencies, and changes affecting previously assessed applications.
  • Communicate assessment results to technical and nontechnical stakeholders, including customers needing remediation expectations.
  • Produce assessment records documenting scope, methodology, evidence, findings, risk analysis, and remediation status.

Qualifications

  • 5 to 7 years of hands-on experience in application security, product security, vulnerability assessment, cloud security, penetration testing, DevSecOps, or related technical security discipline.
  • Strong understanding of OWASP Top 10, insecure configurations, dependency risk, secrets exposure, authentication weaknesses, authorization failures, and software supply chain threats.
  • Hands-on experience assessing applications or services deployed in AWS, Azure, or Google Cloud (direct AWS experience strongly preferred).
  • Working knowledge of containers, Docker, Kubernetes, container registries, CI/CD pipelines, and modern software delivery practices.
  • Experience using multiple security testing technologies (SAST, DAST, software composition analysis, container scanning, IaC scanning, secrets detection, vulnerability scanners).
  • Ability to interpret CVEs, CVSS, EPSS, CISA KEV, vendor advisories, exploit information for risk assessment.
  • Experience reviewing SBOMs and investigating vulnerable open-source or third-party dependencies.
  • Working knowledge of DISA STIGs, Security Requirements Guides, CIS Benchmarks, and secure configuration practices.
  • Understanding of NIST SP 800-53, SP 800-37, continuous monitoring, and government authorization evidence usage.
  • Ability to explain findings clearly and provide actionable remediation guidance.
  • Sound judgment with incomplete information or conflicting results.
  • Experience validating scan results for accuracy, reachability, and exploitability.
  • Must be able to obtain and maintain a Public Trust determination.

Skills

Required:Hands-on application securityCloud security (AWS, Azure, GCP)SAST/DAST/Software composition analysis/Container scanningRegulatory frameworks

Benefits

  • Competitive salary
  • 100% employer-paid medical, dental, and vision coverage for you and your dependents
  • 401(k) with a 3% company contribution
  • Wellness benefits including One Medical membership and mental health resources
  • Equity incentive plan
  • New hire technology and home office stipend
  • Annual professional development stipend
  • Flexible paid time off plus federal holidays
  • Generous parental leave
  • Flexible remote work opportunities
Last updated Oct 14, 2026. Interested? Apply on the company site.
Second Front Systems logo

About Second Front Systems

Powering software for the free world.

Discover a better path to ATO. Leverage Second Front’s accredited software platform to fast-track securing authorization for government use of your SaaS software.

softwaregovernmentsecurityaccreditationSaaScompliancecloud
Company profileWebsite

More open roles at Second Front Systems