Cyber Security Engineer (Vulnerability Management & DevSecOps) DoS CSS

OneZero Solutions; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

Life insurance

401(k) matching

Paid time off

Holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions LLC is seeking a Cyber Security Engineer to support daily Tenable and Wiz operations, implement security checks in CI/CD pipelines, and coordinate with ISSOs. The role requires DoD-style compliance experience and a SECRET clearance, with remote work within the NCR.

The candidate will deploy agents, schedule scans, triage results, and ensure SAST/ IaC security checks are in CI/CD/CM pipelines, contributing to RMF evidence packages and continuous monitoring efforts.

Qualifications

• 5+ years cybersecurity or systems engineering experience.
• 2+ years operating Tenable, Wiz, or comparable vulnerability platforms.
• Hands-on with CI/CD tooling and SAST/SCA or container scanning tools.
• Scripting proficiency and REST API familiarity.

Responsibilities

• Operate Tenable and Wiz day-to-day: scan execution, agent deployment, asset onboarding, tagging, and results review.
• Distribute results to ISSOs within 5 business days and produce remediation reports and metrics.
• Participate in on-call rotation and support backups, patching, and troubleshooting.
• Triage CVE/STIG findings and help prioritize critical/high findings.
• Ensure security controls (SAST, dependency, container, IaC scanning) in CI/CD pipelines; document in SSP.
• Analyze code/pipeline findings for security weaknesses and verify mitigation/workflow integrity.
• Perform risk and IT governance assessments across the CI/CD/CM pipeline and brief ISSOs.
• Support hardened-build verification and ad-hoc scanning requests.
• Maintain scanning SOPs/runbooks and provide evidence for RMF steps.

Skills

Tenable/Wiz experience

CI/CD tooling

Scripting (Python/PowerShell/Bash)

REST APIs

Security clearance SECRET

IAT II baseline cert (Security+ / CySA

NIST SP 800-53 Rev. 5 knowledge

Education

Bachelor's degree or 4 years rel exp

Tools

GitLab CI

Jenkins

Azure DevOps

GitHub Actions

Nessus/Tenable

Wiz

Kubernetes

Terraform

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/>

Position Title

Cyber Security Engineer

Location

Remote; must reside within the National Capital Region (NCR).

Work Schedule

Full-time, 40 hours per week. Must be available during Department core hours of 9:00 a.m. - 3:00 p.m., Monday - Friday, and flex working hours as needed to meet CST day-to-day and emergent requirements. No work is performed on Federal holidays or during Government closures. Participates in a rotating on-call schedule supporting 24x7x365 availability of the vulnerability and compliance scanning platforms.

Employment Type

Full-Time, Exempt (W-2), contingent upon Call Order award

Clearance

Secret

Position Summary

The Cyber Security Engineer supports daily operation of the Tenable and Wiz vulnerability and compliance scanning platforms and serves as the program's DevSecOps security engineer. The engineer deploys agents, executes and schedules scans, triages and distributes results to ISSOs, and works with development teams to ensure static analysis, dependency, container image, and infrastructure-as-code security checks are implemented in CI/CD/CM pipelines and captured as authorization evidence.

Key Responsibilities

• Operate Tenable andWiz dayto day: scan execution and scheduling, Nessus Agent deployment and health, asset onboarding, grouping and tagging per CA configuration standards, and quality review of results.
• Distribute vulnerability and compliance scan results to ISSOs within 5 business days of scan completion; produce remediation tracking reports and metrics; supportiPostapplication groupings.
• Participate in the on-call rotation and support platform backups, patching, and troubleshooting under direction of the Cyber Security Engineer III.
• Triage vulnerability, KEV, CVE, and STIG scan results; assist ISSOs in prioritizing critical and high findings to Department and BOD timelines.
• Ensure applicable pipeline securitycontrols (SAST, dependency scanning, container image scanning, and infrastructure-as-codechecks) are implemented in DevSecOps CI/CD/CM pipelines; document the controls for the SSP and capture scan reports in the Evidence Index (RMF Step 3).
• Analyze code and pipeline findings for security weaknesses and verify that mitigation strategies are validated and sustained across the system lifecycle.
• Perform risk identification and IT governance assessments throughout the CI/CD/CM pipeline; brief ISSOs on pipeline risks.
• Support hardened-build verification for development and production systems and ad-hoc scanning requests.
• Support agent, data ingest and sharing, and pipeline integration efforts.
• Maintain scanning SOPs and runbooks; provide Tenable/Wiz evidence for control demonstrations during RMF Step 4.

Required Qualifications

• Five (5)+ years of cybersecurity or systems engineering experience, including two (2)+ years operating Tenable, Wiz, or a comparable enterprise vulnerability management platform.
• Hands-on experience with CI/CD tooling (GitLab CI, Jenkins, Azure DevOps, or GitHub Actions) and at least one SAST/SCA or container scanning tool (e.g., SonarQube, Fortify, Snyk, Trivy, Anchore, Prisma).
• Scripting proficiency (Python, PowerShell, or Bash) and comfort with REST APIs.
• Active, final SECRET security clearance; U.S. citizenship.
• DoD 8140/8570 IAT Level II baseline certification (e.g., Security+ CE, CySA+, GSEC) or ability to obtain within 6 months.
• Working knowledge of NIST SP 800-53 Rev. 5 vulnerability and configuration management controls (RA-5, SI-2, CM-6, SA-11).

Preferred Qualifications

• Tenable or Wiz certification; Certified DevSecOps Professional or equivalent.
• Experience with Kubernetes/containers, Terraform, and cloud (AWS/Azure) security.
• Department of State or other federal civilian experience; iPost familiarity.
• STIG/SCAP experience and DISA STIG Viewer proficiency.

Technical Skills

• Tenable (tenable.sc/Nessus/Agents) and Wiz operations; scan scheduling and results analysis.
• CI/CD security tooling: SAST, SCA/dependency scanning, container image scanning, IaC scanning (e.g., Checkov, tfsec).
• Linux/Windows fundamentals, Git, Python/PowerShell/Bash, REST APIs.
• NIST SP 800-53 Rev. 5, SP 800-218 (SSDF), CISA KEV, STIG/CIS benchmarks.

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an additional four (4) years of directly relevant experience in lieu of degree.

Remote/Hybrid/On-site And Any Other Relevant Work-environment Requirement

Remote. Duties are performed remotely; the selected candidate must reside within the National Capital Region (NCR). The Government does not furnish equipment; OneZero provides the laptop and collaboration tools. Position requires an OpenNet account, DoS PIV badge, multifactor authentication, and adherence to DoS SBU/CUI handling requirements. Local travel within the National Capital Region; minimal other travel.

Position Status

New Position, contingent upon Call Order award

OneZero Solutions LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.