> Markdown version of [/jobs/ext/3382932-sr-principal-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/3382932-sr-principal-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Principal Information Security Engineer

- **Company:** Clarity
- **Location:** Springfield, VA, United States
- **Experience:** Expert
- **Salary:** $139,000.0 - $314,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, User Authentication, Cloud Computing Security, Cyber Security, Identity and Access Management, Key Management, Linux Security Modules, Network Segmentation, Systems Development Life Cycle, Software Vulnerability Management, Data Logging, Data Classification, Software Security, Devsecops, Vulnerability Analysis
- **Published:** September 10, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=82076b9974865cb4

## About the Role

* RMF
 * cATO/DevSecOps security practices
 * Security architecture
 * Threat modeling
 * Vulnerability management
 * Security testing
 * Application security
 * API security
 * Container security
 * Kubernetes security
 * Cloud security
 * Identity and access management
 * Authentication/authorization
 * Encryption and key management
 * Logging and security monitoring
 * Linux security
 * Network segmentation
 * Data classification and handling
 * Secure SDLC
 * SBOM and software supply-chain security
 * NIST cybersecurity frameworks
 * STIGs and/or applicable government security controls
 * AI/ML security and AI assurance

## Description

The Security/AI Assurance Engineer will ensure that all capabilities developed by the team comply with security requirements, classification boundaries, IC security policies, and applicable RMF/cATO processes. Security will be incorporated throughout architecture, development, testing, deployment, and sustainment rather than treated as a final approval activity.

The engineer will conduct security architecture reviews, threat modeling, vulnerability assessment, security testing, AI-specific risk assessment, and compliance documentation. The position will also support the Government's software approval process and work closely with the platform and software engineers to automate security controls wherever practical.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)