信息安全工程师
Information Security Engineer
ASRC Federal 是一家领先的政府承包商，致力于在太空、公共卫生和国防领域推进任务。作为一家阿拉斯加原住民拥有的公司，我们的工作有助于保障股东的长远未来。加入我们的团队，了解为什么我们是一家备受推崇的退伍军人雇主，并获得认证的优秀工作场所™
ASRC Federal Agile Decision Sciences LLC 正在寻找一名信息安全工程师，要求至少拥有美国国防部机密级安全许可，以支持 DSOP 平台范围内的网络安全需求。这些分析师将确保 DSOP 环境中的安全配置、持续监控、漏洞管理和合规性。该职位为远程办公，候选人必须在美国境内。要求的工作时间是东部标准时间（上午 8 点至下午 5 点）。
职责：
- 进行容器和 Kubernetes 安全评估
- 开发强化配置和符合 STIG 标准的基线
- 构建和维护容器仓库、镜像和流水线的安全控制
- 执行漏洞扫描、修复跟踪和报告
- 支持 RMF 认证、持续监控和安全工程任务
- 与 DevSecOps 和基础设施团队协作，将安全集成到 CI/CD 流程中
- 实施零信任安全模式和安全部署流程
- 管理密钥、证书轮换和身份验证
资格：
- 8–10 年以上的网络安全或安全工程经验
- 持有有效的美国国防部机密级许可或更高。没有最低机密级许可的候选人将不被考虑
- 必须具备 Kubernetes 安全、容器扫描工具和镜像加固方面的专业知识
- 计算机科学、其他工程或技术学科的学士学位，主修信息安全或网络安全；或拥有信息安全或网络安全方向的高级学位，或 4 年以上同等专业工作经验者优先
- 熟悉国防部 STIG、RMF、ACAS、Nessus、OpenSCAP 等工具
- 有支持安全云或平台环境的经验
- 持有安全相关认证者优先（如 Security+、CEH、CISSP、CCSK 等）
我们通过提供具有竞争力的薪酬和福利包，关注员工在工作内外的生活。提供的福利可能包括医疗保险、牙科保险、视力保险、人寿保险；401(k)；教育补助；带薪休假，包括年假、节假日和其他任何需要的带薪假期
查看英文原文
ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
ASRC Federal Agile Decision Sciences LLC is seeking an Information Security Engineer with a minimum of an active DoW Secret security clearance to support DSOP platform-wide cybersecurity requirements. These analysts will ensure secure configuration, continuous monitoring, vulnerability management, and compliance across DSOP environments. This position is remote, candidate must be U.S. based. Required work schedule is Eastern Standard Time Working Hours (8 am to 5 pm).
Responsibilities:
- Conduct container and Kubernetes security assessments
- Develop hardened configurations and STIG-aligned baselines
- Build and maintain security controls for container registries, images, and pipelines
- Perform vulnerability scanning, remediation tracking, and reporting
- Support RMF accreditation, continuous monitoring, and security engineering tasks
- Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
- Implement zero-trust security patterns and secure deployment workflows
- Manage secrets, certificate rotation, and identity enforcement
Qualifications:
- 8–10+ years of cybersecurity or security engineering experience
- Active DoW Secret clearance or higher. Candidates without a minimum of a Secret clearance will not be considered.
- Expertise with Kubernetes security, container scanning tools, and image hardening is mandatory.
- Bachelor’s Degree in Computer Science, or other Engineering, or Technical discipline with an Information Security or Cyber Security Concentration, Advanced Degree with concentration in Information Security or Cyber Security are all preferred or 4+ additional years of equivalent professional work experience.
- Familiarity with DoD STIGs, RMF, ACAS, Nessus, OpenSCAP, etc.
- Experience supporting secure cloud or platform environments
- Security certifications preferred (Security+, CEH, CISSP, CCSK, etc.)
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
EEO Statement ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.
Originally posted on Himalayas