Site Security

ClearanceJobs manually screens every employer requesting access to our service to ensure legitimacy. We regularly turn away prospective clients when they don’t meet our strict requirements: First, the employer must be U.S.-based, and its recruiters using ClearanceJobs must be U.S. citizens. Second, the employer must be an authorized government contractor, recognized search firm, or Federal agency. And finally, access to ClearanceJobs is restricted to the 50 U.S. states, and we block traffic on a server level to ClearanceJobs from hostile foreign countries. ClearanceJobs is presently utilized by more than 12 U.S. government agencies, including the DoD, DHS, DoS, CIA, FBI, and multiple national laboratories. Our commitment to security and privacy is unparalleled in our industry.

SECURITY BY PROCESS

When creating ClearanceJobs, we contacted the U.S. Defense Security Service to help us follow suggested guidelines, learn about potential threats, and fully understand what responsibilities employers and people with security clearances have to their country. Our system design maintains U.S. Defense Counterintelligence and Security Agency recommendations.

Authorized defense contractors who register their company with ClearanceJobs must provide the contact information of their company Facility Security Officer. We manually verify the legitimacy of each company and contact their security officer before that company can gain access to our resume database. Unlike other online job platforms, it is not possible to use a credit card to obtain access to the resume database. All employers must go through the manual screening process.

PHYSICAL SECURITY

The ClearanceJobs site, servers, and databases are hosted and managed through Amazon Web Services (AWS), a cloud-based architecture system. There are many advantages to cloud architecture including reliability, security, access, and unlimited server capacity. Designated employees can manage the site from any location. When issues arise, the response time is quicker due to not having to travel to a defined location. Having a cloud-based solution also means that we are more secure. Only key employees can access the AWS services. There is no entry-point for unauthorized individuals to access stored ClearanceJobs data.

SERVER LEVEL SECURITY

We have taken many steps to prevent unauthorized access to ClearanceJobs data. Server level security includes, but is not limited to, IP filtering, spam-mail prevention, and the use of strong encryption and/or PGP, along with Verisign’s SSL certificates. All unnecessary functions are disabled, or removed from the system entirely, such as X Windows and FTP. We have two-factor authentication for all server access across all environments.

SOFTWARE LEVEL SECURITY

We routinely perform security testing both internally and externally on our servers and software. We also perform security testing in pre-production environments to ensure that any vulnerabilities are identified and mitigated prior to release into our production environment. Our network is continuously monitored by a third-party company to determine if unauthorized persons are attempting to gain access or to head off a Denial of Service attack.