# Cybersecurity Assessment Engineer at Second Front Systems

> Remote · region unclear · Unspecified · Security · open. Source: https://alderhq.app/jobs/ashby%3Asecond-front-systems%3A52da9b7a-d88a-4122-91d2-4bde9b822cc0 (read 2026-11-05).

## Facts (observed)

- Company: [Second Front Systems](https://alderhq.app/companies/second-front-systems)
- Location text: Remote
- Where it can be done from (inferred): Remote · region unclear (evidence: "Remote, region not stated")
- Posted: 2026-07-17 (110 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://jobs.ashbyhq.com/second-front-systems/52da9b7a-d88a-4122-91d2-4bde9b822cc0
- Skills listed (inferred): AWS, GCP, Azure, Kubernetes, Docker

## Pay and sponsorship

- Posted pay: $155k–$175k per year (from the listing's pay field)
- Licensed UK sponsor: registered as "Second Front Systems Limited" (checked 2026-11-03, [register](https://www.gov.uk/government/publications/register-of-licensed-sponsors-workers))

## Description (the employer's text)

### Cybersecurity Assessment Engineer

Second Front Systems (2F) is seeking a Cybersecurity Assessment Engineer to perform hands-on security assessments of software deployed through the Game Warden platform.

This is not a scan-operator or checklist-only position. We are looking for someone who can investigate technical findings, understand how an application is built and deployed, distinguish meaningful risk from scanner noise, and give engineering teams practical guidance they can act on.

Reporting to the Head of Product Security & Compliance, you will assess customer applications, container images, cloud configurations, software dependencies, and supporting artifacts before and after deployment. You will work directly with Product, Platform Engineering, DevOps, Mission Success, and customer development teams to identify vulnerabilities, evaluate their actual risk, and determine whether an application is ready to operate within Game Warden.

Your work will directly influence deployment decisions, vulnerability remediation, continuous monitoring, and the security posture of a platform supporting mission-critical government software.

Note: Candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia

• Raleigh/Durham/Chapel Hill, NC

• Denver/Colorado Springs, CO

• Dallas/Fort Worth, TX

This is a full-time position.

### What You'll Do

• Perform technical security assessments of customer applications and services seeking deployment through the Game Warden platform.

• Review application artifacts, container images, software dependencies, infrastructure configurations, data flows, APIs, and deployment documentation to identify security weaknesses.

• Analyze results from SAST, DAST, software composition analysis, container scanning, infrastructure-as-code scanning, secrets detection, and vulnerability management tools.

• Serve as a trusted technical security partner to Mission Success, Platform Engineering, DevOps, and customer development teams.

• Partner with Security Authorization Specialists to ensure technical assessment results and supporting evidence can be used for RMF, FedRAMP, and continuous monitoring activities.

• Provide developers with clear remediation guidance that identifies the vulnerable component, explains the risk, and recommends specific corrective actions.

• Evaluate requests for vulnerability exceptions or delayed remediation. Validate the stated rationale, examine compensating controls, and provide a documented risk recommendation to the appropriate approving authority.

• Support recurring continuous monitoring reviews by identifying new vulnerabilities, configuration drift, outdated dependencies, and changes affecting previously assessed applications.

• Communicate assessment results directly to technical and nontechnical stakeholders, including customers who may need help understanding findings and remediation expectations.

• Produce clear assessment records that document the scope, methodology, evidence reviewed, findings identified, risk analysis performed, and remediation status.

### What You Bring

• Posses 5 to 7 years of hands-on experience in application security, product security, vulnerability assessment, cloud security, penetration testing, DevSecOps, or a closely related technical security discipline.

• Strong understanding of common application and cloud vulnerabilities, including the OWASP Top 10, insecure configurations, dependency risk, secrets exposure, authentication weaknesses, authorization failures, and software supply chain threats.

• Hands-on experience assessing applications or services deployed in AWS, Azure, or Google Cloud. Direct AWS experience is strongly preferred.

Working knowledge of containers, Docker, Kubernetes, container registries, CI/CD pipelines, and modern software delivery practices.

• Experience using multiple security testing technologies, such as SAST, DAST, software composition analysis, container scanning, infrastructure-as-code scanning, secrets detection, and vulnerability scanners.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/ashby%3Asecond-front-systems%3A52da9b7a-d88a-4122-91d2-4bde9b822cc0 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.