> Markdown version of [/jobs/ext/3604003-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/3604003-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** ASRC Federal Holding Company
- **Location:** Richmond, VA, United States
- **Experience:** Experienced
- **Salary:** $115,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Cloud Computing Security, Cyber Security, Continuous Integration, Zero Trust Network Access, SC Clearance, Information Technology, Tenable Nessus, Nessus, Devsecops, Vulnerability Analysis
- **Published:** October 7, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3419712890&tx=CT2927TTZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 8-10+ years of cybersecurity or security engineering experience
 * Active DoW Secret clearance or higher. Candidates without a minimum of a Secret clearance will not be considered.
 * Expertise with Kubernetes security, container scanning tools, and image hardening is mandatory.
 * Bachelor's Degree in Computer Science, or other Engineering, or Technical discipline with an Information Security or Cyber Security Concentration, Advanced Degree with concentration in Information Security or Cyber Security are all preferred or 4+ additional years of equivalent professional work experience.
 * Familiarity with DoD STIGs, RMF, ACAS, Nessus, OpenSCAP, etc.
 * Experience supporting secure cloud or platform environments
 * Security certifications preferred (Security+, CEH, CISSP, CCSK, etc.)

## Description

* Conduct container and Kubernetes security assessments
 * Develop hardened configurations and STIG-aligned baselines
 * Build and maintain security controls for container registries, images, and pipelines
 * Perform vulnerability scanning, remediation tracking, and reporting
 * Support RMF accreditation, continuous monitoring, and security engineering tasks
 * Collaborate with DevSecOps and infrastructure teams to integrate security into CI/CD
 * Implement zero-trust security patterns and secure deployment workflows
 * Manage secrets, certificate rotation, and identity enforcement