Cybersecurity Engineer
Core
Own all aspects of the RMF process (accreditation) for DoD platforms and champion continuous security implementations within DoD environments.
Role type
Senior IC Cybersecurity Engineer (RMF/FedRamp)
Builds
Secure, cloud-native software solutions for U.S. Government mission owners
Domain
U.S. Federal Government / Defense / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
NIST-800 series standards, FedRamp/ATO processes, risk assessment, vulnerability analysis, security testing (STIGs, ACAS, CI/CD), compliance-as-code, DoD security clearance eligibility, Gov Cloud environment access
Preferred skills
FedRamp High authorization, continuous authority to operate (cATO), Open Security Controls Assessment Language (OSCAL), Department of the Air Force (DAF) security approval processes, DAF Gov Cloud offerings, Cloud Computing Security Requirements Guide (CC SRG)
Technologies
Kubernetes, AWS/GCP/Azure, Terraform/Pulumi, GitOps, Helm/Kustomize, OSCAL
Responsibilities
Lead pathfinding efforts to achieve accreditation per NIST-800 series; Develop and implement cybersecurity policies and controls; Conduct risk assessments and vulnerability analyses; Collaborate with cross-functional teams to integrate security into SDLC; Perform security testing and evaluation (STIGs, ACAS, CI/CD); Provide guidance for continuous monitoring; Prepare accreditation documentation (SSPs, SARs); Support automated Compliance-as-Code capabilities
Seniority
Senior, hands-on IC