Remote opportunity at
SkylightSenior/Staff Security Engineer (U. S. Air Force)
Skylight operates as a digital consultancy that leverages technology and design to assist government agencies in improving public services. The organization is currently seeking a Senior…
Career Tools
About This Role
Skylight operates as a digital consultancy that leverages technology and design to assist government agencies in improving public services. The organization is currently seeking a Senior or Staff Security Engineer for a fully remote position supporting a U.S. Air Force program office portfolio of civil engineering systems. This role centers on security automation to help shift the program toward an outcome-driven delivery model. The chosen candidate will work alongside government…
Job Description
Skylight operates as a digital consultancy that leverages technology and design to assist government agencies in improving public services. The organization is currently seeking a Senior or Staff Security Engineer for a fully remote position supporting a U.S. Air Force program office portfolio of civil engineering systems. This role centers on security automation to help shift the program toward an outcome-driven delivery model.
The chosen candidate will work alongside government personnel and other contractors to integrate security and testing directly into the development pipeline. Core duties involve generating authorization evidence through automation, mapping controls under the Risk Management Framework, conducting security audits, and coaching public-sector partners to sustain these practices long-term. This position is contingent upon Skylight winning the underlying contract and involves occasional travel to Montgomery, Alabama, and other U.S. Air Force bases.
Compensation for this role depends on seniority level, with a salary range of $90,000 to $125,000 for associate positions, scaling up to $203,000 for staff engineers and higher for principal levels. Skylight offers comprehensive benefits including full medical, dental, and vision coverage, disability and life insurance, flexible paid time off, up to twelve weeks of paid parental leave, and a dollar-for-dollar 401(k) match up to 10 percent with no vesting period.
Responsibilities
- Automate security evidence generation and map controls under RMF to support continuous authorization
- Author control implementations and the body of evidence, including documenting inherited controls from the software factory
- Conduct security audits and risk analyses while planning and implementing remediations
- Translate compliance requirements into practical engineering choices for the team
- Build trust with security reviewers and authorizing officials by clearly explaining technical tradeoffs
- Pair with and coach government teams to ensure they can maintain security practices independently
Requirements
- Ability to detect, mitigate, and prevent security risks by continually reviewing application vulnerabilities
- Familiarity with common vulnerability sources, regulatory compliance requirements, and security frameworks
- Demonstrated experience taking systems through RMF and ATO, preferably within the Department of Defense
- Experience automating security evidence generation or mapping RMF controls
- Proficiency in writing clean, working, and reusable code in at least one programming language
- Experience delivering iterative work within cross-functional teams and maintaining alignment on remote projects
- U.S. citizenship, eligibility to obtain a Common Access Card, and successful completion of a company background check
- Availability to conduct all work within the United States
Qualifications
- Experience with continuous ATO, eMASS, and POA&M management
- Experience documenting inherited controls from cloud platforms or DoD software factories such as Platform One or Cloud One
- Experience with compliance as code tools, GitLab CI, static code scanning via Checkmarx, and SBOM generation
- Background in cloud infrastructure and infrastructure as code
- Experience delivering technology within government, heavily regulated industries, or public-benefit sectors
Core Skills
Benefits
- Medical, dental, and vision insurance
- Short-term and long-term disability insurance
- Life and AD&D insurance
- Dependent care FSA, healthcare FSA, and health savings account
- Dollar-for-dollar 401(k) match up to 10 percent of salary with no vesting period
- Flexible paid time off policy of approximately 25 days annually plus 11 paid federal holidays
- Up to 12 weeks of paid parental leave for new birth, adoption, or foster parents
- Performance rewards including annual salary increases, performance bonuses, spot bonuses, and stock options
- Business development, sales, and employee referral bonuses
- Annual professional development allowance of $2,000
- Annual technology purchase allowance of $750
- Annual merchandise budget of $100
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position fully remote?
Yes, the posting specifies that this is a fully remote position, though it does require occasional travel to Montgomery, Alabama, and other U.S. Air Force bases.
What is the salary range for this role?
The posting lists a broad salary range spanning from $90,000 to $230,000 per year depending on the specific seniority level determined during the interview process, with the entry tier starting at $90,000 to $125,000.
What are the citizenship and clearance requirements?
Applicants must be U.S. citizens, must be able to obtain a Common Access Card along with any required special access, and must successfully complete a company background check.
How can I apply or request accommodations?
Candidates may apply directly through the posting. If you need reasonable accommodations during the application or interview process, you can contact the recruiting team via email at recruiting@skylight.digital.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.