{"id":2506511,"url":"https://alion.io/job/sunayu-staff-cyber-security-engineer-tssci","title":"Staff Cyber Security Engineer - TS/SCI","company":{"id":4422519,"name":"Sunayu","domain":"sunayu.com","url":"https://alion.io/company/sunayu","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bethesda, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":127000,"max_usd":252000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":414},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Service Mesh","optional":false},{"name":"AWS","optional":true},{"name":"Checkmarx","optional":true},{"name":"Fortify","optional":true},{"name":"IAM","optional":true},{"name":"Nessus","optional":true},{"name":"Red Hat","optional":true},{"name":"SonarQube","optional":true},{"name":"Splunk","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-20T10:39:00Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Location: Bethesda, MD\nCategory: Cyber Security Engineer\nTravel Required: No\nRemote Type: No\nClearance: TS/SCI\nWhile most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. The percentage of remote work will vary based on client requirements/deliverables.\nCandidates must have a demonstrated ability to work in a dynamic and challenging environment and possess a solid understanding of the software development life cycle all while working within an Agile framework.\nPrimary Responsibilities\nYou will work closely with the team on the following key tasks\nCollect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts\nCollect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence (BOE) results required to support DoD & IC RMF cybersecurity authorization processes\nConduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems\nImplement and manage security controls for containerized applications and the underlying cloud-based infrastructure\nCollaborate with DevSecOps, infrastructure, and software development teams to ensure secure coding and engineering practices\nEnsure integration of security measures into software development processes, CI/CD pipelines, and engineering tools\nDevelop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation\nImplement and manage continuous monitoring solutions of cloud-based architectures\nSupport Government cybersecurity officials & program personnel in preparing cybersecurity packages, including Interim Authority to Test (IATT) packages, Authority to Operate (ATO) packages, and Change Requests (CRs)\nStay current with emerging cloud security threats, technologies, and best practices\nBasic Qualifications\nClearance: Active or current Top Secret with SCI eligibility and the ability to obtain PolygraphEducation & Experience: Bachelor’s degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or related technical discipline and 8-12 years of relevant experience OR Master’s degree with 6-10 years of relevant experience. Additional years of experience may be considered in lieu of a degree. ISSO experience must be supplemented with demonstrated technical expertise.\n\nCertification: At least one DoD 8570.01-M IAT and one IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associate) and the ability to obtain Privileged User Account (PUA)/elevated access per DoD 8570 policy, and Linux+ certification\nAt least 5 years of experience hardening Linux hosts and applying DISA STIG\nDemonstrated experience securing Kubernetes platforms (secrets management, RBAC, etc.) and integrating security into CI/CD pipelines and containers\nDemonstrated experience developing A&A packages to obtain and maintain ATO in secure environments.\nGrounded knowledge in NIST SP 800-37, SP 800-53, CNSSI 1253\nXACTA/eMass experience, performing vulnerability compliance with ACAS, STIG automation\nExperience with scripting languages (Bash, Python)\nUnderstanding of secure software development practices and code reviews\nExperience with encryption and transport\nUnderstanding of microservices architecture and service mesh.\nPreferred Qualifications\nActive TS/SCI with polygraph\nExperience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS\nExperience supporting the Intelligence Community in RMF activities with ICD 503 and related compliance directives, policies, procedures\nExperience with the Zero Trust pillars and applying Zero Trust framework to secure systems\nDAST & SAST tools for on-prem (Fortify, Checkmarx, SonarQube), configuring Nessus, Splunk\nMultiple IAT/IAM II or III advanced certifications such as, CISSP-ISSAP/ISSEP, CISM, CCSP, Security X/CASP+\nCloud certifications such as AWS Solutions Architect, AWS Security Specialty, Kubernetes and Cloud Native\nAssociate (KCNA), Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)\nLinux certifications such as: Red Hat Certified System Administrator - Enterprise Linux (RHCSA), Red Hat Certified Engineer - Enterprise Linux (RHCE), Red Hat Certified Architect - Enterprise Linux (RHCA)\nPrior Linux sys admin experience\nOracle Linux 8 System Administrator certification\nExperience applying security controls to various AI implementations\nExperience with ICD 503 compliance\nExperience applying security controls to Generative AI implementations\nPrior network engineering experience\n-----------------------------------------------------------------------------------------------------------\nWho We Are \nSunayu, LLC serves as a premier technology partner to the Defense and Intelligence communities, delivering mission-critical engineering solutions across the nation. Our operations are anchored in a commitment to trust, accountability, and ethical transparency, ensuring the high-performance outcomes necessary to protect our country's most vital interests. \nCulture\nOur strength lies in our community: Our team prioritizes collaboration, professional growth, and encourages open communication. At Sunayu, we don't just secure the mission-we grow together.\nCareer Development\nWe support and encourage our team members to continue their professional growth by providing company-reimbursed training and continuing education of up to $5,000 per year. We also participate in many industry conferences and events where we share our expertise and experiences.\nPay Rate\nSalary range considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills, as well as market and business considerations when extending an offer.\n\nBenefits\n3 Medical Plan Options\nDental and Vision \nFSA, DCFSA, HSA\nLife/AD&D Insurance\nShort-Term & Long-Term Disability \nEmployee Assistance Program (EAP)\nTraining and Educational Assistance\nPaid Time Off (PTO)\n11 Federal holidays \n401k plan with up to a 6% match (100% immediate vesting) \nEqual Opportunity Employer\nSunayu, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran status, disability status, marital status, genetic information, medical condition, or any other characteristic protected by law.","description_format":"text","description_chars":6602,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T07:34:18Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.901,"p_room":1,"age_days":7,"expected_fill_days":31,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sunayu-staff-cyber-security-engineer-tssci","json_url":"https://alion.io/job/sunayu-staff-cyber-security-engineer-tssci.json","meta":{"generated_at":"2026-10-20T10:45:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11741,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422519},"rest":"https://alion.io/mcp/rest/get_company?id=4422519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsunayu-staff-cyber-security-engineer-tssci"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsunayu-staff-cyber-security-engineer-tssci"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsunayu-staff-cyber-security-engineer-tssci"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sunayu-staff-cyber-security-engineer-tssci\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsunayu-staff-cyber-security-engineer-tssci"}]}