Cybersecurity Engineer - DevSecOps for Navy Readiness

Socket.dev; Norfolk (VA); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health & Dental Insurance

Vision & Life Insurance

401(K) + company match

Paid Time Off (PTO)

Tuition & Professional Development

Job summary

Cydecor is seeking a cybersecurity engineer to work the security side of software delivery on a Navy readiness program. You will run security testing across the development pipeline, triage findings, and guide remediation in code and CI/CD processes.

In this hands-on role, you’ll apply RMF guidance, review DoD directives, and coordinate with stakeholders to maintain security posture while supporting accreditation and continuous monitoring.

Qualifications

• 5+ years in cybersecurity engineering focusing on SDLC and vulnerability management.
• Experience with security testing in CI/CD using SonarQube/Fortify/Checkmarx/Snyk in Azure DevOps or equivalents.
• Proficient in vulnerability scanning/remediation: STIGs, ACAS/Nessus, secure code review, dependency management.
• Knowledge of RMF for DoD systems to align with security posture.
• IAM Level II Information Assurance Certification (DoDI 8570.01-M) or DoD 8140.03 equivalent.

Responsibilities

• Run security testing across the development pipeline including SAST, DAST, SCA, and container scanning.
• Triage and prioritize findings; collaborate with developers to remediate and close issues.
• Review code/dependencies and provide actionable remediation guidance.
• Apply STIGs and hardening baselines; track patching cadence.
• Enforce secure change management and perform Security Impact Analyses for Navy systems.
• Review Navy directives to ensure applicability to NRRE systems and coordinate with stakeholders.
• Ensure alignment with RMF posture and support accreditation/continuous monitoring.

Skills

Security testing

CI/CD security

Vulnerability management

RMF knowledge

IAM Level II

Education

Bachelor's degree in CS/Engineering

Tools

SonarQube

Fortify

Checkmarx

Snyk

Azure DevOps

ACAS

Nessus

Job description

Cydecor is seeking a cybersecurity engineer to work the security side of software delivery on a Navy readiness program. You will run security testing across the development pipeline, triage findings, and guide remediation in code and CI/CD processes.

In this hands-on role, you’ll apply RMF guidance, review DoD directives, and coordinate with stakeholders to maintain security posture while supporting accreditation and continuous monitoring.