Note: The job is a remote job and is open to candidates in USA. ICF is an information technology and management consulting provider offering strategic technology solutions for public- and private-sector clients. The Security/ATO Engineer will coordinate and document security engineering and authorization activities, track and remediate security requirements and findings, review technical artifacts, and support security controls, DevSecOps, and authorization-readiness activities.
Responsibilities
- Translate applicable security requirements into actionable engineering and documentation tasks
- Coordinate security controls evidence, assessment activities, findings, and remediation tracking
- Review architecture, configurations, code-quality output, and test evidence for security concerns
- Partner with developers and DevSecOps personnel to address vulnerabilities and secure delivery pipelines
- Maintain security risks, issues, decisions, and authorization artifacts
- Support client reviews, status reporting, and authorization-readiness activities
Skills
- Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S
- Candidate must have lived in the U.S. for three (3) full years out of the last five (5) years
- Candidate must be able to pass successful Public Trust background check
- Ship is required by the federal government for this position
- Minimum five years of experience supporting federal information-system security, assessment, or authorization activities
- Bachelor's degree in cybersecurity, information systems, or a related field; directly related experience may be considered in place of education
- Experience documenting and tracking security controls, evidence, findings, and remediation actions
- Working knowledge of secure software development, vulnerability management, and security testing
- Ability to communicate security requirements to technical and nontechnical stakeholders
- Ability to work effectively in Agile delivery teams and collaborate with government and contractor stakeholders
- Relevant federal security, cloud, or information-assurance certification
- Experience with Agile modernization programs and CI/CD security controls
- Highly effective analytical, problem-solving, and decision-making capabilities
- Excellent communication and interpersonal skills to work effectively across business, technical, and client teams
- Organized, detail-oriented, and able to prioritize multiple assignments in a delivery-focused environment
Benefits
- Remote work is authorized. Must support US Eastern time zone working hours.
Company Overview