Cybersecurity Engineer - Clearance Required

Socket.dev; Norfolk, Northern (VA, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Cydecor is seeking a hands-on cybersecurity engineer to secure a Navy readiness reporting program. You will work with development teams to embed security into how software is designed, built, tested, and deployed.

Responsibilities include running SAST, DAST, software composition analysis, and container/image scanning, triaging findings, and guiding remediation in the code and CI/CD pipeline under the Cybersecurity Lead Engineer while maintaining RMF alignment.

Qualifications

• Hands-on cybersecurity engineering in software delivery.
• Strong understanding of RMF and security posture alignment.
• Experience triaging and remediating security findings in CI/CD.

Responsibilities

• Run security testing across the development pipeline, including SAST, DAST, SCA, and container scanning.
• Triage and prioritize security findings and guide remediation throughout code and CI/CD pipelines.
• Review code and dependencies for security issues and provide actionable remediation guidance.

Skills

RMF knowledge

Security testing

Vulnerability scanning

SAST

DAST

CI/CD security

Code review

Bug remediation

Tools

SAST tools

DAST tools

SBOM tools

Container scanning

SCA tools

Job description

Cydecor is a premier Federal Government solutions provider, delivering differentiated innovations in mission systems and business platforms. We leverage leading-edge secure systems and software development, backed by industry-leading subject matter expertise, and business intelligence to enable decision-support and remain ahead of ever-evolving national security challenges. Our success rests squarely on three bedrock principles: People, our center of gravity; Mission, what inspires us; and an unyielding commitment to Excellence, what separates us.

Job Description:

We're looking for a cybersecurity engineer to work the security side of software delivery on a large Navy readiness reporting program. You'll work shoulder-to-shoulder with the development teams - finding vulnerabilities early, driving fixes into the code and the pipeline, and helping build security into how software gets designed, built, tested, and deployed. This is a hands-on engineering role. You'll run and tune the security testing, chase findings to closure, and help keep the codebase and its dependencies clean. You'll work under the Cybersecurity Lead Engineer and should have a strong understanding of the Risk Management Framework (RMF) to ensure your work remains aligned with the program's security posture, while the Cybersecurity Lead Engineer retains ownership of the ATO packages.

Responsibilities include:

• Run security testing across the development pipeline, SAST, DAST, software composition analysis, and container/image scanning - and keep it tuned so it catches what matters.
• Triage and prioritize security findings, distinguish actionable issues from false positives or low-risk items, and collaborate with developers to implement remediation throughout the code and CI/CD pipeline. Track findings through resolution and ensure timely closure.
• Review code and dependencies for security issues and give developers clear, specific remediation guidance they can act on.