Senior/Staff Security Engineer (U. S. Air Force)

About Skylight

Skylight is a digital consultancy using design and technology to help government agencies deliver better public services.
We’re at the forefront of a civic movement to reinvent how all levels of government serve families, patients, and many others in today’s digital world.
If you want to play a part in driving this critical movement forward, we’d love for you to join our growing team of public interest technologists.
At Skylight, security engineers stay up to date with the cutting edge of security and help teams implement new processes, tools, and remediations. They’re familiar with modern software development and work in cross-functional teams to inform and guide security best practices at all stages of the software development life cycle.
Air Force program office that runs a portfolio of civil engineering systems. These systems serve users across civil engineering, security forces, and services, including readiness managers, range personnel, and fire and emergency services. We’ll move the program to an outcome-driven model with test automation and security built into the pipeline, starting with migrating the first application onto a DoD software factory. Leadership wants this office to become the model other Air Force offices adopt.
In this role, you’ll focus on security automation: generating authorization evidence from the pipeline so security review happens alongside development instead of after it.

Your first 30 days are about working with the Skylight team and government personnel, learning how the program office gets changes to users today, and understanding where testing and security slow things down. This is new work that replaces a traditional support model, so part of the job is coaching your government partners to keep these practices running after we leave. Expect to work alongside government engineers and other contractors, with tools and processes changing as the work gets underway.
This role is contingent on Skylight being awarded the underlying contract. If we’re not awarded the contract, we’ll let you know promptly and discuss whether there are other opportunities that fit.
Author control implementations and the body of evidence, including documenting controls inherited from the software factory
Conduct security audits and risk analyses, and plan and implement remediations
Translate compliance requirements into practical engineering choices the team can act on
Able to detect risks by continually reviewing all aspects of the application for vulnerabilities and enumerating them
Able to mitigate and prevent risks by proactively working with teams to build secure and compliant systems
Familiarity with regulatory requirements regarding security and compliance
Experience taking systems through RMF and ATO, ideally in DoD, including authoring the control implementation and body of evidence
Can write clean, working, and reusable code in at least one programming language
Experience working on cross-functional teams (product, design, engineering, ops) in iterative delivery
A track record of staying aligned and accountable on remote teams
Experience documenting inherited controls from a cloud platform or DoD software factory (Cloud One, MDaaS, Platform One, or similar)
Experience with compliance as code, including GitLab CI, Checkmarx or other static code scanning, and SBOM generation
Experience with cloud infrastructure and infrastructure as code
This contract requires U.You must be able to obtain a Common Access Card (CAC) and any special access required for this contract.
Logistics
This is a full-time, exempt position.
This is a fully remote position.
Travel
This role includes occasional travel to Montgomery, AL, and other U.We’re targeting a start date of November 30, 2026, pending contract award.
Medical insurance, dental insurance, vision insurance
Short-term and long-term disability insurance
Life and AD&D insurance
Dependent care FSA, healthcare FSA, health savings account
Flexible paid-time-off policy (generally around 25 days per year), plus 11 paid federal holidays
Performance rewards, including annual salary increase, annual performance bonus, spot bonuses, and stock options
Business development / sales bonuses
Referral bonuses
Flexible, remote-friendly work environment
Here are some tips to help you prepare for a successful interview:

If you’d like to request reasonable accommodations during the application or interviewing process, please contact our recruiting team at
All qualified applicants will receive consideration for employment without regard to race, color, national origin, sex, religion, age, disability, veteran status, or any other category protected by applicable law.