Description review
ISSO Support and Continuous ATO Evidence Engineer
Zaden Technologies · United States · back to the listing
HR standards
68/100
needs work
Title ↔ description
74/100
solid
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
Zaden Technologies is a defense technology company based in Huntsville, Alabama. We build AI, DevSecOps and digital engineering products and put them to work for DoD customers.
This position is contingent upon contract award. It supports a new Defense Health Agency program, and the start date follows award and Government access.
You'll author and maintain the Risk Management Framework package for a health data exchange platform and keep its continuous authorization evidence current. You'll write control statements, manage plans of action and milestones, and work with the Government ISSO and the security operations lane so the authorization never lapses.
What you'll do:
Author SP 800-53 Rev. 5 control statements and keep the eMASS package current
Manage POA&Ms from finding to closure with the engineering teams
Automate evidence collection with AWS Config and the platform's pipelines
Support assessments, inheritance decisions and authorization boundary changes
Hold privileged access to the authorization tooling under the program's security rules
Must have:
5 or more years in DoD RMF package work with eMASS
DoD 8140 qualification for the ISSO work role, or the ability to earn it within six months
Hands-on SP 800-53 Rev. 5 control authoring and POA&M management
U.S. citizenship and the ability to obtain and maintain the Tier 3 investigation and IT-II designation this privileged role needs
Nice to have:
An active Secret clearance or Secret eligibility
Continuous ATO or DevSecOps pipeline evidence experience
AWS GovCloud and AWS Config
DHA or health IT authorization experience
Location: Remote within the United States. Zaden's home office is Huntsville, Alabama.
Citizenship: U.S. citizenship is required for the investigation this role needs.
Questions about this role? Email .
How we use AI in hiring: Zaden uses AI tools to help organize and prioritize applications. People review every application and make every hiring decision. To ask about an accommodation or about how your application was reviewed, email .
If you need an accommodation to apply or interview, email and a person will help.
Equal opportunity: Zaden Technologies is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other status the law protects.
Originally posted on Himalayas
This position is contingent upon contract award. It supports a new Defense Health Agency program, and the start date follows award and Government access.
You'll author and maintain the Risk Management Framework package for a health data exchange platform and keep its continuous authorization evidence current. You'll write control statements, manage plans of action and milestones, and work with the Government ISSO and the security operations lane so the authorization never lapses.
What you'll do:
Author SP 800-53 Rev. 5 control statements and keep the eMASS package current
Manage POA&Ms from finding to closure with the engineering teams
Automate evidence collection with AWS Config and the platform's pipelines
Support assessments, inheritance decisions and authorization boundary changes
Hold privileged access to the authorization tooling under the program's security rules
Must have:
5 or more years in DoD RMF package work with eMASS
DoD 8140 qualification for the ISSO work role, or the ability to earn it within six months
Hands-on SP 800-53 Rev. 5 control authoring and POA&M management
U.S. citizenship and the ability to obtain and maintain the Tier 3 investigation and IT-II designation this privileged role needs
Nice to have:
An active Secret clearance or Secret eligibility
Continuous ATO or DevSecOps pipeline evidence experience
AWS GovCloud and AWS Config
DHA or health IT authorization experience
Location: Remote within the United States. Zaden's home office is Huntsville, Alabama.
Citizenship: U.S. citizenship is required for the investigation this role needs.
Questions about this role? Email .
How we use AI in hiring: Zaden uses AI tools to help organize and prioritize applications. People review every application and make every hiring decision. To ask about an accommodation or about how your application was reviewed, email .
If you need an accommodation to apply or interview, email and a person will help.
Equal opportunity: Zaden Technologies is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other status the law protects.
Originally posted on Himalayas