Cloud-Native Security Engineer – RMF & DevSecOps

Jobtailor; Colorado; On-site; USD 120,000 - 170,000; Full time

Job summary

Jobtailor is seeking a security engineer embedded with an Agile program delivering GEOINT capabilities to the NGA. The role focuses on integrating security controls into cloud-native systems and automating compliance in CI/CD pipelines.

Candidates will have TS/SCI with polygraph eligibility, a DoD/IC RMF background, and hands-on experience with vulnerability assessment, STIG/Nessus, and IAT II certifications. On-site work at a Government facility is required.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related technical discipline, or equivalent experience.
• 4+ years of security engineering or information assurance experience.
• Experience implementing NIST RMF controls on DoD or IC systems.

Responsibilities

• Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the NGA.
• Engineer security into modern, cloud-native systems rather than bolting it on after the fact.
• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards.
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps).
• Perform system hardening, vulnerability assessment, and remediation across development and production environments.
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors.
• Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure.
• Advise development teams on secure design, secure coding, and security architecture decisions.
• Document security engineering artifacts supporting ATO and continuous monitoring.

Skills

Security engineering

Agile environments

DevSecOps

RMF controls

Vulnerability assessment

Security architecture

Education

Bachelor's degree in Cybersecurity/CS

Tools

ACAS/Nessus

STIG hardening

Job description

• Serve as a security engineer embedded with an Agile program delivering GEOINT capabilities to the National Geospatial-Intelligence Agency (NGA)
• Engineer security into modern, cloud-native systems rather than bolting it on after the fact
• Design and implement security controls across applications, platforms, and infrastructure in accordance with RMF and NGA standards
• Integrate security tooling and automated compliance checks into CI/CD pipelines (DevSecOps)
• Perform system hardening, vulnerability assessment, and remediation across development and production environments
• Support security assessment and authorization activities in coordination with Government ISSMs and assessors
• Analyze findings, develop mitigation strategies, and maintain POA&Ms through closure
• Advise development teams on secure design, secure coding, and security architecture decisions
• Document security engineering artifacts supporting ATO and continuous monitoring

Requirements

• TS/SCI Security Clearance with ability to obtain Polygraph
• Bachelor's degree in Cybersecurity, Computer Science, or related technical discipline (equivalent experience accepted)
• 4+ years of security engineering or information assurance experience
• Experience implementing NIST RMF controls on DoD or IC systems
• Hands-on experience with STIG hardening, ACAS/Nessus, and security remediation
• DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent)
• Ability to work on-site at a Government facility.

Core Competencies

Demonstrates expertise in security engineering within Agile environments, focusing on the integration of security controls and compliance in cloud-native systems. Proficient in implementing NIST RMF controls and conducting vulnerability assessments while maintaining security documentation and artifacts.

Highest-signal resume keywords

• Security Engineering
• NIST RMF Implementation
• STIG Hardening
• DevSecOps Integration
• DoD 8570/8140 IAT Level II Certification

ATS Optimization Keywords

Hard Skills

• Vulnerability Assessment
• System Hardening
• Security Control Design
• Automated Compliance Checks
• Secure Coding
• Security Architecture
• Mitigation Strategy Development
• Continuous Monitoring

Soft Skills

• Advisory Skills
• Collaboration

Certifications & Qualifications

• TS/SCI Security Clearance
• Security+ CE

Industry Keywords

• GEOINT
• National Geospatial-Intelligence Agency
• Information Assurance
• DoD
• Intelligence Community

Tools & Technologies

• ACAS
• Nessus
• CI/CD Pipelines