{"id":3462411,"url":"https://alion.io/job/rise8-senior-security-engineer-cleared","title":"Senior Security Engineer (Cleared)","company":{"id":7709,"name":"Rise8","domain":"rise8.us","url":"https://alion.io/company/rise8","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"D","score":47,"open_postings":10,"ghost_share":0.8,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":113,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colorado Springs, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":143824,"max":179780,"currency":"USD","period":"year","gross":null,"usd_annual":179780},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SBOM","optional":false},{"name":"SLSA","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2025-10-24T18:39:17Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T01:16:10Z","board_verified":true,"closed_at":null,"days_open":374,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":373},"description":"Your Dream. Our Team.\nAbout Rise8\nRise8 builds custom, secure software for government organizations, measuring success by impact: lives saved, time returned, and missions advanced. \nWe think big, start small, and scale fast with elite teams across product, design, and engineering to drive continuous delivery for critical missions.\nWe believe customer experience starts with employee experience, so we take care of our employees. Rise8 is where you’ll do the best work of your career-supported by a culture you won’t find anywhere else. We offer competitive pay and benefits, but what sets us apart is our commitment to autonomy, growth, and a culture rooted in kindness, candor, and continuous learning. \nCertified as a Great Place to Work®, with 100% of employees saying they love working here, Rise8 is where bold ideas become real capabilities. Where mission meets meaning. And where fewer bad things happen because of bad software.\nAbout the role\nWe are hiring a Senior Security Engineer to own security across both the build pipeline and the authorization package across multiple teams and program domains. You will design and harden the cloud infrastructure and CI/CD that ships our software, translate whole regulatory frameworks into code, drive program-wide Continuous ATO (cATO) adoption, and automate evidence gathering for data-driven risk reduction.\nThis is hands-on engineering focused. Most organizations split this work between a security engineer who’s abstracted from compliance and a compliance SME who rarely works embedded within the development team. With compliance and authorizations viewed as a part of continuous delivery and continuous compliance, these roles are blended into one. As a Senior Security Engineer, you own the outcomes for security and compliance for delivery.\nWhat you will own \nDelivery pipeline and cloud infrastructure\nOwn the CI/CD pipelines that deliver production software across teams, including build integrity, SLSA artifact signing, and least-privilege pipeline credentials.\nSet the secure golden path patterns and landing zone architectures across AWS GovCloud / Azure GCC High environments, enforcing Zero Trust principles in code.\nSecure the software supply chain across the program: dependency scanning, secret detection, SBOM generation, provenance verification, and pinned build actions.\nHarden container and orchestration layers from base image selection through admission control policies (Kyverno, OPA Gatekeeper).\nControls as code\nTranslate whole control frameworks (NIST 800-53, CMMC, FedRAMP, DISA CC SRG) into automatable technical checks, building implementations rather than documenting manual processes.\nDecide where control gates sit and what they block, ensuring changes that break controls fail builds automatically before reaching assessment.\nThreat model complex distributed systems and carry mitigations directly through to running code and automated guardrails.\nBuild and lead the adoption of agentic/AI-driven security tooling across teams, applying rigorous engineering judgment to AI safety and utility.\nEvidence and authorization\nOwn the evidence system across the program, establishing continuous collection from cloud APIs, CI/CD runners, and scanner feeds so posture derives from live data.\nAuthor control implementation statements and inherited-versus-owned boundary splits at a level of quality that assessors accept without rework.\nDrive Continuous RMF and cATO practices, keeping security posture reportable on demand and maintaining real-time POA&M status.\nImplement unified control libraries so a single technical check satisfies NIST 800-53, SOC 2, and ISO 27001 simultaneously.\nTrain, mentor, and foster growth for security engineers across the practice.\nWhat we need you to have \n6-10 years of experience in cloud/platform operations, DevSecOps, or security engineering.\nDeep technical fluency in the security surface of major cloud platforms (AWS GovCloud, Azure GCC High), including where default settings are insecure.\nHands-on pipeline construction: you have built and hardened production CI/CD platforms, not merely consumed them.\nInfrastructure as Code (Terraform) as your standard method for managing infrastructure and security controls.\nDirect experience applying control frameworks (NIST 800-53, FedRAMP, CMMC) to real production systems.\nStrong programming capability in Python, Go, or Rust at the level required to build custom security tools, admission controllers, and evidence pipelines.\nThe ability to hold both vocabularies fluently: stating controls to developers as system requirements and pipeline gates to assessors as control satisfaction.\nCertifications & DoD 8140 Compliance\nRise8 Standard: No certification is required to interview or receive an offer. We evaluate candidates on practical engineering capabilities, code delivery, and compliance problem-solving-not test scores.\nContract Requirements (DoD 8140 / 8570): Specific customer engagements and Department of Defense programs may require an approved baseline certification (e.g., DoD 8140.03 / 8570.01-M) to obtain elevated administrative privileges or access to customer enclaves. Candidates already holding an applicable certification will be eligible for immediate deployment to these contracts. For candidates hired without one, Rise8 will support and sponsor obtaining the required credential if assigned to a billable role that mandates it.\nRelevant baseline credentials worth mentioning (DoD IAT Level III / CSSP / IAM Level III aligned): CISSP, CKS, CCSP, AWS Security - Specialty, Red Hat RHCE, GIAC (GSLC/GCIH), or equivalents.\nWhat helps \nDirect experience carrying an ATO or cATO package end to end (SSP authoring, POA&M management, continuous monitoring).\nExperience in Federal Agency Environments (CMS, VA, IRS, DOC, DOJ, etc.)\nExperience in DoD Software Factory environments (Platform One, Space CAMP, Kessel Run) and Impact Level (IL4/IL5/IL6) requirements.\nExperience in either private or public sector GRC Engineering.\nTravel\nPosition may require up to 25% travel in support of contract performance, customer site visits, and program activities.\nSalary \nThe annual salary range for this role as it is posted is $143,824 - $179,780 regardless of final candidate location within the United States. The final job level and annual salary will be determined based on the education, qualification, knowledge, skills, ability, and experience of the final candidate(s), and calibrated against relevant market data and internal team equity. \nBenefits\nFlexible schedule in a 100% distributed workforce \nPremium Insurance: We cover up to 100% of the employee premium and up to 80% of the combined dependent premium on our base health plan, depending on pay band. We also cover 100% of the premium for employee and dependent Dental and Vision as well as employee premiums for Life and Disability coverage.\nRetirement: 401k match at 10% gross pay.\nPaid time off (PTO): 4 weeks combined accrued vacation and sick leave, 11 Federal holidays, your birthday, jury duty, and bereavement.\nEducation & Training: Accrued budget of up to $3,500 per year for classes, travel, events, and materials.\nHome Office and Merch: We offer $750 per year for home office technology and equipment as well as $100 per year for Rise8 merch from our Swag Store.\nWellness Budget: To encourage and support a well-rounded healthy lifestyle, we cover 100% reimbursement on a variety of wellness activities and products, up to $500 per calendar year. \nRise8 is part of the Life Time Corporate Partner program. In lieu of your $500 annual wellness benefit, you can instead get a $75 monthly credit towards a Life Time membership ($900 annual benefit).\nEquipment: We offer a MacBook Pro\nAll of Rise8’s work in this area is with Federal Government customers that require our employees involved with their projects be U.S. citizens. As such, this role requires U.S. citizenship. If hired, you would also be required to go through a background investigation.\nRise8 is an Equal Employment Opportunity employer that will consider you for this role regardless of race, color, religion, gender, sexual orientation, marital status, gender identity or expression, national origin, genetics, age, disability status, protected veteran status, or any other characteristic protected by applicable law.","description_format":"text","description_chars":8339,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["401k plan","Apple Macbook","Continuous learning","Equity","Flexible schedule","Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-29T14:19:34Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.28,"age_days":373,"expected_fill_days":113,"reasons":["conf:3","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":179780,"is_top_pay":true},"html_url":"https://alion.io/job/rise8-senior-security-engineer-cleared","json_url":"https://alion.io/job/rise8-senior-security-engineer-cleared.json","meta":{"generated_at":"2026-11-03T04:19:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5868,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7709},"rest":"https://alion.io/mcp/rest/get_company?id=7709"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frise8-senior-security-engineer-cleared"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frise8-senior-security-engineer-cleared"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frise8-senior-security-engineer-cleared"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rise8-senior-security-engineer-cleared\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frise8-senior-security-engineer-cleared"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3462411}},{"tool":"search_jobs","arguments":{"company":"rise8.us","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3462411},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}