{"id":3188563,"url":"https://alion.io/job/skylight-seniorstaff-security-engineer-u-s-air-force","title":"Senior/Staff Security Engineer (U. S. Air Force)","company":{"id":684855,"name":"Skylight","domain":"skylighthq.com","url":"https://alion.io/company/skylighthq","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":90000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Checkmarx","optional":true},{"name":"GitLab CI","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-10-24T00:04:38Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-31T10:03:17Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"About Skylight\nSkylight is a digital consultancy using design and technology to help government agencies deliver better public services. \nWe’re at the forefront of a civic movement to reinvent how all levels of government serve families, patients, and many others in today’s digital world.\nIf you want to play a part in driving this critical movement forward, we’d love for you to join our growing team of public interest technologists. \nThe work we do matters.\nAbout the job\nAt Skylight, security engineers stay up to date with the cutting edge of security and help teams implement new processes, tools, and remediations. They’re familiar with modern software development and work in cross-functional teams to inform and guide security best practices at all stages of the software development life cycle.\nSkylight is partnering with a U.S. Air Force program office that runs a portfolio of civil engineering systems. These systems serve users across civil engineering, security forces, and services, including readiness managers, range personnel, and fire and emergency services. Releases are slow today. Regression testing is manual, security review happens after development finishes, and code freeze to production can take a month or more. We’ll move the program to an outcome-driven model with test automation and security built into the pipeline, starting with migrating the first application onto a DoD software factory. Leadership wants this office to become the model other Air Force offices adopt.\nIn this role, you’ll focus on security automation: generating authorization evidence from the pipeline so security review happens alongside development instead of after it.\nWhat to know going in\nYour first 30 days are about working with the Skylight team and government personnel, learning how the program office gets changes to users today, and understanding where testing and security slow things down. This is new work that replaces a traditional support model, so part of the job is coaching your government partners to keep these practices running after we leave. Expect to work alongside government engineers and other contractors, with tools and processes changing as the work gets underway.\nThis role is contingent on Skylight being awarded the underlying contract. If we’re not awarded the contract, we’ll let you know promptly and discuss whether there are other opportunities that fit.\nWhat you’ll do\nAutomate security evidence generation and map controls under RMF to support continuous authorization\nAuthor control implementations and the body of evidence, including documenting controls inherited from the software factory\nConduct security audits and risk analyses, and plan and implement remediations\nTranslate compliance requirements into practical engineering choices the team can act on\nBuild trust with security reviewers and authorizing officials, and explain technical tradeoffs clearly\nPair with and coach government teams so they can sustain these security practices after we leave\nWhat we’re looking for\nBasic qualifications\nAble to detect risks by continually reviewing all aspects of the application for vulnerabilities and enumerating them\nAble to mitigate and prevent risks by proactively working with teams to build secure and compliant systems\nFamiliarity with common sources of vulnerability information\nFamiliarity with regulatory requirements regarding security and compliance\nExperience taking systems through RMF and ATO, ideally in DoD, including authoring the control implementation and body of evidence\nExperience automating security evidence generation or mapping controls under RMF\nCan write clean, working, and reusable code in at least one programming language\nExperience working on cross-functional teams (product, design, engineering, ops) in iterative delivery\nA track record of staying aligned and accountable on remote teams\nA mindset and work approach that aligns with our core values\nNice-to-haves\nExperience with continuous ATO, eMASS, and POA&M management\nExperience documenting inherited controls from a cloud platform or DoD software factory (Cloud One, MDaaS, Platform One, or similar)\nExperience with compliance as code, including GitLab CI, Checkmarx or other static code scanning, and SBOM generation\nExperience with cloud infrastructure and infrastructure as code\nExperience delivering technology in government, regulated industries, or other public-benefit settings\nDon’t meet every qualification but think you can do the job? We’d still love to hear from you. If you’re excited about the role, apply. We consider candidates with a range of backgrounds and experiences.\nOther requirements\nSome of our available roles are on federal contracts that require a degree or additional years of experience as a substitute.\nAll work must be conducted within the U.S., excluding U.S. territories.\nThis contract requires U.S. citizenship to be eligible for employment.\nYou must be able to obtain a Common Access Card (CAC) and any special access required for this contract.\nYou must complete a company background check successfully.\nLogistics\nPosition type\nThis is a full-time, exempt position.\nLocation\nThis is a fully remote position.\nTravel\nThis role includes occasional travel to Montgomery, AL, and other U.S. Air Force bases.\nExpected start date\nWe’re targeting a start date of November 30, 2026, pending contract award.\nCare package\nSalary\nWe want to give you the most competitive salary possible. After all, you deserve it! To that end, we use the results of our interview process to determine what salary is most appropriate given your current level of seniority. For a Security Engineer at Skylight, the current salary ranges are as follows:\nAssociate Security Engineer: $90,000-$125,000\nSecurity Engineer I: $120,000-$140,000\nSecurity Engineer II: $135,000-$160,000\nSenior Security Engineer: $150,000-$185,000\nStaff Security Engineer: $170,000-$203,000\nPrincipal Security Engineer: $180,000-$230,000\nBenefits\nYour well-being is important to us, so we focus on supporting you in a variety of ways:\nMedical insurance, dental insurance, vision insurance\nShort-term and long-term disability insurance\nLife and AD&D insurance\nDependent care FSA, healthcare FSA, health savings account\nDollar-for-dollar 401(k) match up to 10% of your salary with no vesting period\nFlexible paid-time-off policy (generally around 25 days per year), plus 11 paid federal holidays\nUp to 12 weeks paid-time-off for all eligible new birth, adoption, or foster parents\nPerformance rewards, including annual salary increase, annual performance bonus, spot bonuses, and stock options\nBusiness development / sales bonuses\nReferral bonuses\nAnnual $2,000 allowance for professional development\nAnnual $750 allowance for tech-related purchases\nAnnual swag budget of $100 to display your Skylight pride with some merchandise (hoodies, hats, and more)\nFlexible, remote-friendly work environment\nAn environment that empowers you to unleash your superpowers for public good\nInterview tips\nOur process includes a preliminary screen, a skills interview, a behavioral interview, and a reverse interview where you meet your potential team - usually four conversations across two to three weeks. Here are some tips to help you prepare for a successful interview:\nVisit our join page to learn more about how our interview process works.\nCheck out our Career Pathways framework to learn more about the different roles within Skylight and the skills needed to do them.\nBrowse our case studies to learn more about our work.\nIf you’d like to request reasonable accommodations during the application or interviewing process, please contact our recruiting team at .\nWe participate in E-Verify and upon hire, will provide the federal government with your Form I-9 information to confirm that you’re authorized to work in the U.S.\nWe are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, sex, religion, age, disability, veteran status, or any other category protected by applicable law.","description_format":"text","description_chars":8124,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Dental insurance","Health insurance","Professional development","Stock options","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-24T00:57:58Z"}],"visa":[],"liveness":{"score":87,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.874,"p_room":1,"age_days":7,"expected_fill_days":25,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/skylight-seniorstaff-security-engineer-u-s-air-force","json_url":"https://alion.io/job/skylight-seniorstaff-security-engineer-u-s-air-force.json","meta":{"generated_at":"2026-10-31T11:59:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18514,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684855},"rest":"https://alion.io/mcp/rest/get_company?id=684855"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskylight-seniorstaff-security-engineer-u-s-air-force"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskylight-seniorstaff-security-engineer-u-s-air-force"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskylight-seniorstaff-security-engineer-u-s-air-force"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skylight-seniorstaff-security-engineer-u-s-air-force\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskylight-seniorstaff-security-engineer-u-s-air-force"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3188563}},{"tool":"search_jobs","arguments":{"company":"skylighthq.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3188563},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}