About the role
About Rune Rune Technologies is here to revolutionize the status quo of military logistics and sustainment through the deployment of AI-enabled solutions. Combining elite Silicon Valley software expertise with deep operational experience working in and with the Department of Defense, Rune builds cutting-edge software to solve the most critical logistics challenges faced by the U.S. military and its allies. Rune’s flagship product is TyrOS, an advanced software platform to enhance logistics at tactical and operational echelons, providing unified, comprehensive management of inventory, personnel, equipment and distribution. TyrOS integrates critical information for holistic, data-driven logistics decisions, leveraging AI for decision support, predictive analytics and optimization at machine speed. Rune’s mission is to support and enable the military logistics and sustainment communities with software to meet needs for the next fight.
About
the Role We are seeking an Information Systems Security Engineer (ISSE) to own and drive the security posture of Rune’s platforms across classified and unclassified environments. In this role, you will operate at the intersection of software engineering, cybersecurity, and mission deployment—ensuring our systems meet stringent DoD security
requirements while remaining fast, scalable, and usable in real-world operational environments. You will work closely with engineering, product, and mission teams to embed security directly into our systems—from architecture through deployment—while navigating the realities of classified, air-gapped, and edge environments. This is a high-ownership role for someone who can balance security rigor with execution speed. What You’ll Do Own the end-to-end security posture of Rune systems across development, deployment, and sustainment Automate vulnerability scanning and document generation processes with CI/CD, scripting and/or AI tools Lead and execute RMF (Risk Management Framework) processes, including system categorization, control selection, assessment, authorization, and continuous monitoring Develop and maintain security artifacts (e.g., SSPs, POA&Ms, control matrices) to support Authority to Operate (ATO) Tailor and implement NIST 800-53 controls and ensure compliance across cloud, edge, and air-gapped environments Partner with engineering teams to integrate secure design principles and DevSecOps practices into the software development lifecycle Conduct vulnerability assessments, security scans, and risk analyses, and drive remediation efforts Translate commercial technology standards into classified and operational environments Collaborate with Information System Owners, government stakeholders, and accrediting authorities to meet mission and compliance