Senior Cybersecurity Engineer / DevSecOps Engineer
Core
Engineer and sustain security controls for OSI cloud systems and development pipelines, integrating security testing and compliance into engineering workflows.
Role type
Senior IC DevSecOps Engineer (Cloud Security)
Builds
Secure cloud systems, CI/CD pipelines, and security monitoring capabilities for federal government clients.
Domain
Federal Cybersecurity / Cloud Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
NIST RMF implementation, vulnerability management, DevSecOps integration, SIEM/centralized logging, secure configuration baselines, risk analysis, cloud security architecture
Preferred skills
AWS GovCloud, Kubernetes, container security, automated policy/code/dependency testing, technical leadership
Technologies
ACAS, HBSS, eMASS, DISA STIGs/SRGs, SIEM, Infrastructure-as-Code, CI/CD pipelines
Responsibilities
Engineer and sustain cybersecurity controls for cloud systems and DevSecOps environments; Implement and validate DISA STIG/SRG requirements and secure configuration baselines; Design and support vulnerability-scanning architecture and findings analysis; Analyze security-tool results (ACAS, HBSS) and manage POA&Ms; Engineer and sustain SIEM, logging, and security-monitoring capabilities; Integrate automated security checks into infrastructure-as-code and CI/CD pipelines; Develop and maintain secure architecture diagrams and RMF artifacts (SSP, RAR, SAP); Coordinate with system owners and developers to resolve risk; Lead technical reviews and root-cause analysis.
Seniority
Senior, hands-on IC