Security Authorization Specialist

Security Authorization Specialist Second Front Systems (2F) is seeking a detail-oriented, mission-focused Security Authorization Specialist to join our cybersecurity team. We are a fast-growing company operating at the intersection of advanced technology and national security, with a mission to accelerate the delivery of secure software to the nation’s defenders. In this role, you will support the security authorization activities that keep our Game Warden platform and supporting systems authorized across Department of Defense environments. You will develop and maintain authorization packages, coordinate security control assessments, evaluate technical evidence, and work with engineering teams to resolve issues that could affect an authorization decision. The Security Authorization Specialist will support systems throughout the Risk Management Framework lifecycle, from initial package development through assessment, authorization, and continuous monitoring. You will work extensively in eMASS, manage DISA PPSM registrations, produce assessor-ready documentation, coordinate evidence collection, and help ensure system changes remain aligned with approved security requirements. This role is well suited for someone who understands how DoD authorizations work in practice and can translate complex technical implementations into clear, accurate, and defensible security documentation. Note: Candidates must reside in one of our approved hiring hubs: • DC/Maryland/Virginia • Raleigh/Durham/Chapel Hill, NC • Denver/Colorado Springs, CO • Dallas/Fort Worth, TX This is a full-time position. What You'll Do • Prepare, submit, and maintain security authorization packages for systems operating within Department of Defense environments. • Convert technical designs, operational processes, and security capabilities into accurate control implementation statements and supporting documentation. • Architect authorization records in eMASS, ensuring control responses, inherited controls, artifacts, assessment results, and system information remain complete and current. • Establish authorization timelines and coordinate activities across system owners, engineers, assessors, government sponsors, and cybersecurity leadership. • Organize evidence collection for control reviews, readiness activities, and formal assessments. Confirm that submitted materials directly address assessment objectives and accurately represent the system. • Review vulnerability scans, STIG checklists, configuration results, architecture diagrams, policies, and procedures to identify gaps before they affect an authorization decision. • Work with Product, Platform, DevSecOps, and Engineering teams to determine how cloud services, Kubernetes, containers, CI/CD pipelines, and supporting technologies satisfy security requirements. • Track assessment findings and POA&M items from identification through closure. Coordinate remediation plans, document risk decisions, validate corrective actions, and assemble closure evidence. • Manage the continuous monitoring cadence for assigned systems, including recurring control reviews, vulnerability reporting, patch status, IAVM compliance, POA&M reporting, and security posture updates. • Maintain accurate DISA PPSM records for system ports, protocols, services, and data flows. Reconcile registrations with the authorization boundary, network architecture, and applicable Category Assurance List requirements. • Prepare, submit, and maintain security authorization packages for systems operating within Department of Defense environments. • Convert technical designs, operational processes, and security capabilities into accurate control implementation statements and supporting documentation. • Administer authorization records in eMASS, ensuring contr