Skillbridge Intern - ISSE
自2017年以来，HTX Labs 一直在加速学习的未来任务上，为国防部使用沉浸式软件培训解决方案和内容开发服务来提高当今战斗机的熟练度和准备水平。HTX Labs 开发了 EMPACT®沉浸式学习平台，以应对不断增长的培训现代化需求，改善安全性，最大限度地提高运营效率，并在整个国防行业建立弹药力和准备能力。HTX Labs 致力于推动学习创新，提供必要的数字基础设施，使用户能够随时，任何地方，在任何设备上，以任何规模轻松创建，部署，测量和维持任务特定的沉浸式培训计划。信息系统安全工程师 (ISSE) DoW 技能桥位置总结 HTX Labs 正在寻找一个实践的信息系统安全技术人员 (ISSE),设计，实施，自动化和维护支持战争部 (DoW) 系统的安全云和边缘基础设施。该职位与 DevSecOps 工程师每天合作，构建和运营安全的 Microsoft Azure 政府和离线/本地部署，同时将 RMF,CMMC 级2和 DoW 安全要求转化为技术实现。大约15%的这一角色集中在 AI 安全工程上，确保人工智能启用能力安全部署并按照 NIST AI RMF,DoW 指导以及行业最佳实践进行管理。主要责任 · 加强和维护支持 DoW 工作负载的安全云和边缘基础设施。· 合作与 DevSecOps 工程师建立使用现代软件交付和基础设施作为代码 (IaC) 实践的安全 CI/CD 管道。· 实施零信任原则，包括 RBAC,工作负载身份，网络细分，私人网络以及最小特权。· 设计并维护云 IAM,WAF,容器安全，运行时间保护和 Kubernetes 政策执行的安全控制。· 自动验证安全，合规监控，收集证据，修复漏洞和配置管理，使用 PowerShell,Python,Bash,Azure CLI 和 YAML. · 实现和维护 NIST SP 800-53 Rev. 5,通过技术实施进行 RMF,CMMC 级2,STIG 和 DISA 安全控制。·支持 ATO 包，网络安全影响分析 (CIA),SSP 更新，POA&M 补救，安全评估以及持续的研究
查看英文原文
About HTX Labs
Since 2017, HTX Labs has been on a mission to accelerate the future of learning, employing immersive software training solutions and content development services for the Department of Defense to elevate the level of proficiency and preparedness of today's warfighter.
HTX Labs developed the EMPACT® Immersive Learning Platform to address a growing need to modernize training, improve safety, maximize operational efficiency, and build resilience and readiness across the defense industry.
HTX Labs is dedicated to driving learning innovation, providing the necessary digital infrastructure to empower users to easily create, deploy, measure, and sustain mission-specific, immersive training programs anytime, anywhere, on any device, with anyone, at scale.
Information Systems Security Engineer (ISSE) – DoW Skillbridge
Position Summary
HTX Labs is seeking a hands-on Information Systems Security Engineer (ISSE) to design, implement, automate, and maintain secure cloud and edge infrastructure supporting Department of War (DoW) systems. This position partners daily with the DevSecOps Engineer to build and operate secure Microsoft Azure Government and disconnected/on-premise deployments while translating RMF, CMMC Level 2, and DoW security requirements into technical implementations. Approximately 15% of this role focuses on AI Security Engineering, ensuring AI-enabled capabilities are deployed securely and governed in accordance with NIST AI RMF, DoW guidance, and industry best practices.
Primary Responsibilities
- Harden and maintain secure cloud and edge infrastructure supporting DoW workloads.
- Partner with the DevSecOps Engineer to build secure CI/CD pipelines using modern software delivery and Infrastructure as Code (IaC) practices.
- Implement Zero Trust principles including RBAC, workload identity, network segmentation, private networking, and least privilege.
- Engineer and maintain security controls for cloud IAM, WAF, container security, runtime protection, and Kubernetes policy enforcement.
- Automate security validation, compliance monitoring, evidence collection, vulnerability remediation, and configuration management using PowerShell, Python, Bash, Azure CLI, and YAML.
- Implement and maintain NIST SP 800-53 Rev. 5, RMF, CMMC Level 2, STIG, and DISA security controls through technical implementations.
- Support ATO packages, Cybersecurity Impact Analyses (CIAs), SSP updates, POA&M remediation, security assessments, and continuous monitoring.
- Collaborate with engineering teams to secure software supply chains through SBOM generation, image signing, container security, and secure CI/CD.
AI Security Engineering (Approximately 15% of Role)
- Design and implement security controls for AI-enabled applications, LLMs, Retrieval-Augmented Generation (RAG), AI agents, and Model Context Protocol (MCP) integrations.
- Evaluate AI technologies for security, privacy, compliance, and supply chain risks before deployment.
- Mitigate AI-specific threats including prompt injection, model poisoning, jailbreak attacks, insecure tool usage, and data leakage.
- Integrate AI security testing and policy validation into CI/CD pipelines.
- Perform AI threat modeling and architecture reviews using the NIST AI Risk Management Framework (AI RMF) and OWASP Top 10 for LLM Applications.
- Support secure deployment of AI workloads in Azure Government and disconnected Edge environments.
Required Qualifications
- U.S. Citizen.
- 5+ years of experience in cybersecurity, cloud engineering, DevSecOps, or information systems security engineering.
- Experience with Azure or Azure Government, Kubernetes, Linux administration, networking, scripting, and Infrastructure as Code.
- Experience implementing RMF, CMMC, STIGs, or other government cybersecurity frameworks.
- Strong troubleshooting and communication skills.
Preferred Qualifications
- Experience supporting DoW IL4/IL5 environments and Authority to Operate (ATO) efforts.
- Experience with managed/self-managed Kubernetes.
- Experience with CI/CD platforms, GitOps deployment solutions, IaC tools, Kubernetes policy enforcement, container runtime security, cloud IAM, and WAF technologies.
- Experience securing AI-enabled applications, Azure AI Foundry, Azure OpenAI, RAG architectures, or MCP integrations.
- Knowledge of NIST AI RMF, OWASP Top 10 for LLM Applications, secure AI software supply chains, and AI governance.
- Preferred certifications include Security+, CASP+, CKA, CKS, Azure Security Engineer Associate, Azure Administrator Associate, Terraform Associate, or RHCSA.
Desired Characteristics
- Hands-on security engineer focused on building secure cloud-native platforms.
- Collaborates across software engineering, DevSecOps, cybersecurity, AI engineering, and program management.
- Passionate about automation, Zero Trust, AI Security Engineering, and continuous improvement.
Technologies
- Cloud-native architectures
- Managed and self-managed Kubernetes
- Containers and container orchestration
- CI/CD platforms
- GitOps deployment solutions
- Infrastructure as Code (IaC)
- Kubernetes policy enforcement
Work Location: Remote
Reporting Structure: Reports directly to the Enterprise IT and Cybersecurity Manager.
Pay: This internship is not paid through HTX Labs - you will be paid through the DoW as per your Skillbridge Agreement upon approval. Speak to your CO if you have questions.
We’re constantly working towards making HTX Labs the best place to work, for everyone. We believe deeply that bringing together diversity of thoughts, perspectives and expression is key for building the best product for our equally diverse community. We celebrate uniqueness and whatever makes you, you and encourage everyone who wants to help us transform the way the world learns, to join us on our journey. We value all types of experiences. If you don’t think you quite meet every qualification, we’d still love to hear from you. We are interested in qualified candidates who are eligible to work in the United States. We are not able to sponsor work visas at this time.
Originally posted on Himalayas