Security and Compliance Engineer – Top Secret Clearance, SCI Eligibility

AMERICAN SYSTEMS

. Define cybersecurity, compliance, encryption, identity, audit, logging, and monitoring requirements for data ingest, application onboarding, partner access, and IPT integration requests .

Posted 11/5/2026full-timeArlington • Virginia • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance, risk management frameworks, and secure integration practices, with a strong focus on evidence collection and audit readiness. Proficient in coordinating across diverse teams to ensure secure implementation and compliance in classified environments.

Highest-signal resume keywords

Active Top Secret ClearanceCompTIA Security+ CE CertificationISC2 CGRC CertificationExperience with NIST Security ControlsKnowledge of ABAC Concepts

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk Management Framework (RMF)Control MappingVulnerability ManagementData MovementApplication OnboardingAudit ReadinessCryptographic ProtectionsEvidence CollectionMonitoring Needs

Soft Skills

Coordination Across TeamsAdvising StakeholdersAssessment of Technical Changes

Tools & Technologies

EMASSXactaACAS/Nessus/TenableSplunkSTIG ViewerSCAPCloud Security ServicesDevSecOps Security Tooling

Certifications & Qualifications

CompTIA Security+ CEISC2 CGRCCISSPCCSPCISMCISAGSECGCIHGCIAAWS Certified Security – Specialty

Industry Keywords

ComplianceAuditEncryptionIdentity ManagementLeast Privilege AccessControlled Transfer MechanismsMultilevel SecurityGovernment AuthorizationClassified EnvironmentsOperational Readiness

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Define cybersecurity, compliance, encryption, identity, audit, logging, and monitoring requirements for data ingest, application onboarding, partner access, and IPT integration requests
Drive authorization readiness by identifying classification, information domain, releasability, transfer direction, control mapping, evidence, and approval requirements early in the intake process
Develop security artifacts for integration architectures, interface control documents, access control plans, cryptographic protection plans, test plans, readiness packages, and authorization packages
Assess integration risk across least privilege access, ABAC enforcement, cryptographic protections, monitoring needs, auditability, and data handling obligations
Coordinate secure implementation with cross-domain, network, cloud, software, data, and operations teams for CDS, diode, RTB-based CDS, API, broker, streaming, and secure-transfer patterns
Validate security controls during build, configuration, testing, authorization, production cutover, and sustainment handoff
Collect and organize evidence including vulnerability results, control implementation statements, test results, configuration records, findings, mitigation plans, and readiness artifacts
Monitor compliance posture for control drift, access-policy exceptions, audit gaps, configuration concerns, and risks to approved baselines or mission data flows
Advise mission stakeholders on secure integration approaches that preserve mission velocity while meeting Government authorization and compliance obligations

Requirements

What you’ll need

Active Top Secret clearance with SCI and SAP eligibility
Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline, plus 8+ years of related experience
CompTIA Security+ CE or an equivalent DoD 8140/8570 baseline certification
ISC2 CGRC (formerly CAP) or an equivalent Risk Management Framework (RMF) / Assessment and Authorization (A&A) certification
Demonstrated knowledge of RMF, ATO support, control mapping, evidence collection, audit readiness, vulnerability management, and risk mitigation
Experience supporting data movement, application onboarding, partner access, or enterprise integration across cloud, on-premises, and hybrid environments in classified settings
Working knowledge of ABAC concepts, identity attributes, least privilege, PKI, certificates, key management, secrets handling, logging, monitoring, and audit requirements
Familiarity with cross-domain solution planning, controlled transfer mechanisms, classification handling, releasability, and multilevel security landing-zone concepts
Ability to assess technical changes for security impact, implementation risk, testing requirements, rollback considerations, and documentation updates
Ability to coordinate across software, platform, network, data, operations, security, compliance, mission, and Government teams
Experience with NIST security controls, vulnerability scanning, STIG compliance, POA&M tracking, and A&A documentation
Helpful: relevant DoD cybersecurity or cloud security certifications, including CISSP, CCSP, CISM, CISA, GSEC, GCIH, GCIA, AWS Certified Security – Specialty, or Azure Security Engineer Associate
Helpful: experience in SAP or SCI environments
Helpful: experience with eMASS, Xacta, ACAS/Nessus/Tenable, Splunk, STIG Viewer, SCAP, cloud security services, or DevSecOps security tooling
Helpful: experience preparing compliance evidence for operational readiness reviews, change boards, or authorization milestones

Benefits

Comp & perks

100% employee-owned company
Full-time position