Istari

Security Engineer

• Serve as the technical owner of pipeline security tooling, including SAST, SCA, secrets detection, container scanning, and artifact signing
• Assess tooling effectiveness and coverage; identify gaps and lead improvements, consolidation, or replacement
• Develop automated and manual penetration-testing capabilities with rapid feedback loops into engineering
• Help mature security operations and incident response capabilities
• Define the long-term roadmap for security tooling and processes with Cybersecurity and Engineering leadership
• Translate NIST SP 800-53, NIST SP 800-171, and RMF requirements into enforceable pipeline gates, thresholds, and policies
• Maintain risk-based pass/fail criteria while minimizing false positives
• Ensure tooling outputs produce assessor-ready evidence for authorizations, continuous monitoring, and audits
• Own documented and traceable exception and manual-review processes
• Enforce artifact signing, signature verification, commit signing, branch protection, and repository rulesets
• Automate creation and maintenance of SBOMs and VEX data
• Move security checks earlier into developer workstations, pre-commit hooks, and pull requests
• Partner with engineering teams to embed security into workflows
• Apply AI tooling to vulnerability triage, remediation, and security automation; evaluate emerging AI capabilities

Explore Senior Security Engineer at Istari. Review requirements and application details.

Open roles

Senior Security Engineer