Cherokee Federal

Building. Solving. Serving.

Senior Security Controls Assessor

Security EngineerSecurity EngineerFull TimeRemoteTeam 5,001-10,000Since 1969Company SiteLinkedIn

Location

United States

Posted

36 days ago

Salary

Not specified

Bachelor Degree12 yrs expExperience acceptedEnglishCyber Security

Job Description

• Provide independent assessments of MARAD information systems in support of system authorization, reauthorization, and continuous monitoring activities. • Evaluate management, operational, and technical security controls in accordance with NIST Risk Management Framework (RMF) requirements. • Support Authority to Operate (ATO) decisions. • Develop assessment documentation and reports. • Collaborate with MARAD, DOT, and cybersecurity stakeholders to ensure compliance, risk visibility, and mission assurance. • Conduct independent assessments of specified MARAD information systems following the System Authorization process. • Provide annual assessment support to the NSMV and MARAD CIO programs. • Conduct on-site evaluations at the Philadelphia shipyard and other locations. • Develop security assessment plans and assessment reports compliant with latest revisions of NIST Special Publication 800-53A. • Develop Security Assessment Plan (SAP) detailing assessment scope and methods.

Job Requirements

  • Applicant MUST have prior US Navy or Coastguard Maritime Cyber Security experience
  • Bachelor's Degree in Cybersecurity or related IT field may be substituted for 4 years of experience
  • Certified Information Systems Auditor (CISA), Advanced in AI Audit (AAIA), or equivalent certification
  • 12 years of related work experience
  • Prior experience supporting US Navy or Coast Guard Maritime Cyber Assessments
  • Clearance: Must possess or be able to obtain a public Trust.
  • Prior Department of Transportation experience is a plus.
  • Must pass pre-employment qualifications of Cherokee Federal

Benefits

  • Medical
  • Dental
  • Vision
  • 401K
  • Other possible benefits as provided.

Related Categories

Related Job Pages

More Security Engineer Jobs

Cloud Security Engineer

Tetrad Digital Integrity

Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk & the business of cyber for 25 years! TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.

Security Engineer36 days ago
Full TimeRemote

TDI is hiring an exceptional DoW Cloud Security Engineer to strengthen the security engineering posture of a mission-critical, cloud-hosted defense system treated as a high-value target. This is a high-visibility engagement with frequent change, heavy stakeholder involvement, and...

GCPAWSAzureKubernetesGKESIEMSOARPythonGoBashRESTJSONgcloudCloud Audit LogsIAMVPC Flow LogsContainer SecurityIncident ResponseAutomationAPI
United States

Information Security Engineer - Compliance (ATO)

Vannevar

Vannevar is a defense technology company building AI to deter our adversaries. In the 21st century, conflict moves at algorithmic speed and foresight equals firepower. Our agentic AI is purpose-built to compete with China—from cross-Strait conflict to gray zone coercion. Trained on the most mission-relevant datasets in defense, our technology models adversary behavior, simulates campaigns, and recommends the best course of action to decision makers. Our AI systems are some of the most trusted in the industry and actively used on the front lines of the Indo-Pacific to keep the peace and save lives. Exceptional technology starts with exceptional people. Vannevar is a small agile team combining world-class engineers with veteran strategists who bring deep expertise in defense and tradecraft. We’re building a company defined by mission impact, user empathy, and disciplined growth. In just three years, we grew from $3M to $80M in ARR, achieved early profitability, and reached unicorn status—proving that disruption doesn’t require an ego, and staying power doesn’t mean standing still.

Security Engineer36 days ago
Full TimeRemoteTeam 51-200Since 2019

Vannevar Labs is seeking an experienced Information Security Engineer to lead our IL-6 / IL-7 ATO (Authority to Operate) and follow-on compliance efforts. This role will be critical to unlocking our ability to deploy classified capabilities for defense and intelligence customers....

RMFNIST 800-53DISA STIGsXACTAeMASSSIPRJWICSRBACAWS GovCloudAzure GovernmentKubernetesDockerActive DirectoryIDS/IPSSIEMVulnerability AssessmentPKITLSVPNIDSIPSFIMSCAPSTIG ViewerACASHBSS
United States
Security Engineer36 days ago
Full TimeRemoteTeam 1,001-5,000Since 2008H1B Sponsor

Principal Security Engineer developing cloud security architectures at Workiva

Cloud
United States
$177K - $284K / year
Security Engineer37 days ago
Full TimeRemoteTeam 51-200Since 2001H1B No Sponsor

Cloud Security Engineering ISSO supporting RMF and security execution for defense systems

AWSAzureCloudGoogle Cloud Platform
United States