Cybersecurity Engineer – Cloud, DevSecOps & Compliance

Yulista; Falls Church (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

StraitSys Inc. is seeking a Security Engineer to provide cybersecurity engineering and technical security support for enterprise modernization efforts supporting EOIR.

You will help design, implement, and maintain security across applications, systems, and environments, ensuring RMF and federal controls are applied. You will collaborate with stakeholders, conduct risk assessments, and drive secure development practices through the SDLC.

Qualifications

• Must be a US Citizen.
• Must be able to successfully obtain and maintain the DOJ PTI.
• Bachelor's degree from an accredited college or university and relevant professional experience in cybersecurity, information security, systems security engineering, information technology, computer science, or a related discipline.
• Ability to successfully pass a pre-employment drug test and background check.

Responsibilities

• Support the design, implementation, configuration, and maintenance of security controls for applications, systems, and supporting environments.
• Collaborate with solution architects, developers, system administrators, and Government stakeholders to incorporate security requirements throughout the system development lifecycle.
• Review system designs, configurations, interfaces, and technical implementations to identify potential security risks and vulnerabilities.
• Support security assessments, vulnerability scanning, remediation activities, and validation of corrective actions.
• Identify, document, track, and assist with the remediation of security findings and vulnerabilities.
• Support implementation and maintenance of identity and access management, authentication, authorization, least privilege, and role-based access controls.
• Assist with security configuration and hardening of applications, cloud resources, databases, integrations, and supporting infrastructure.
• Support security testing throughout development, integration, testing, deployment, and ongoing operations.
• Collaborate with development and operations personnel to incorporate secure development and DevSecOps practices into application development and deployment processes.
• Support security monitoring and assist with the identification, analysis, response, and remediation of security incidents as required.
• Develop and maintain security-related technical documentation, procedures, configuration information, and supporting artifacts.
• Support the preparation and maintenance of documentation required for system security, authorization, assessment, and ongoing compliance activities.
• Monitor security risks and vulnerabilities and communicate potential impacts and recommended mitigation actions to technical and project leadership.
• Support compliance with applicable DOJ and Federal cybersecurity policies, standards, and requirements.
• Participate in technical reviews, security reviews, project meetings, and other activities necessary to support secure system implementation and operations.

Job description

StraitSys Inc. is seeking a Security Engineer to provide cybersecurity engineering and technical security support for enterprise modernization efforts supporting EOIR.

You will help design, implement, and maintain security across applications, systems, and environments, ensuring RMF and federal controls are applied. You will collaborate with stakeholders, conduct risk assessments, and drive secure development practices through the SDLC.