Vast
Information Assurance Engineer II
About this role
Vast seeks an Information Assurance Engineer II to deploy and maintain security compliance programs supporting NIST, CMMC, and ITAR/EAR standards. The role focuses on automating compliance workflows, integrating security tools, and leveraging AI to accelerate compliance monitoring and gap identification across corporate and mission environments.
What you'll do
- Maintain compliance documentation for NIST 800-171r2, NIST SP 800-53r5, CMMC 2.0, and ITAR/EAR frameworks
- Design and maintain automated compliance workflows including policy checks, evidence collection, and control validation
- Build integrations between security tools (EDR, SIEM, vulnerability scanners) and compliance platforms using APIs
- Leverage AI and machine learning to accelerate security analysis, documentation review, and compliance gap identification
- Create dashboards and automated reporting for compliance posture across multiple frameworks
- Support change management, risk assessments, and internal/external security assessments
What they're looking for
- NIST compliance frameworks (800-53, 800-171, CSF)
- Cloud platforms (AWS, Google Cloud, Azure)
- Security tools (SIEM, IDS/IPS, EDR, vulnerability scanners)
- API integration and workflow automation (n8n, Tines, SOAR)
- Scripting and automation for compliance controls
- AI/LLM tools for security analysis
- Infrastructure-as-code tools (Terraform, Ansible)
- Compliance assessment and audit preparation
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Vast
Vast develops Haven-1, a human-rated space station, and is hiring design reliability engineers across thermal, structures, propulsion, and avionics systems to ensure safe operations, as well as construction project engineers to support the station's development and construction.
- Website
- vast.com
Likely interview questions
- Describe your experience implementing and documenting NIST 800-171 or 800-53 controls in a Defense Industrial Base environment.
- How have you designed automated compliance workflows or evidence collection pipelines in previous roles?