Information Systems Security Engineer

📋 Description

• Lead the security control assessment for an assigned deployment, from control selection and
• Produce the assessment plan, the evidence collection schedule and the residual risk that goes to
• Direct the engineers and security staff producing control artifacts. Tell them which evidence to
• Be the person who can explain a Snowflake control implementation to a government security reviewer
• Track authorization status and blockers, and report them weekly to the engineering lead and the

🎯 Requirements

• You have taken at least one system through authorization to operate under a government security
• You can read an engineering implementation and decide which control it satisfies and what evidence
• You have worked with government authorizing officials or security control assessors, and you know
• You write the plan down. Assessment scope, control status, evidence gaps and residual risk live in
• You are eligible for TS/SCI with a full-scope polygraph, or already hold it.