Cybersecurity Engineer - DoD-Grade Security & DevSecOps

Finch Computing; Washington (District of Columbia); Hybrid; USD 130,000 - 225,000; Full time

Job summary

Finch AI in the Washington, DC area is seeking a cybersecurity engineer to design, implement, and maintain security controls protecting mission systems and data. You will conduct vulnerability assessments, support RMF activities, and collaborate with engineering teams to embed security into the development lifecycle.

The role requires DoD/DoW experience, knowledge of NIST 800-53 and SIEM tools, and DoD 8140/8570 certifications.

Qualifications

• Experience implementing and maintaining cybersecurity controls in a federal/DoD environment.
• Working knowledge of NIST 800-53, RMF, and vulnerability management tools.
• Experience supporting missions for DoW, DHS, FBI, or another national security agency.
• DoD 8140/8570-compliant certification (e.g., Security+, CySA+, CISSP) commensurate with level.
• Willingness to work onsite in the DC metro area as required.

Responsibilities

• Design, implement, and maintain security controls to protect mission systems and data.
• Conduct vulnerability assessments, security scanning, and remediation tracking.
• Support Assessment and Authorization (A&A)/RMF activities, including SSPs, POA&Ms, and continuous monitoring documentation.
• Monitor security events and respond to incidents in coordination with the SOC.
• Implement and maintain endpoint, network, and cloud security tools.
• Support compliance with applicable security frameworks (NIST 800-53, CMMC, DoD RMF).
• Collaborate with engineering teams to embed security into the development lifecycle (DevSecOps).

Skills

Cybersecurity

RMF

NIST 800-53

DevSecOps

Security+ / CISSP

Education

Bachelor's degree in a related field

Tools

SIEM tools

Cloud security (AWS/Azure GovCloud)

Job description

Finch AI in the Washington, DC area is seeking a cybersecurity engineer to design, implement, and maintain security controls protecting mission systems and data. You will conduct vulnerability assessments, support RMF activities, and collaborate with engineering teams to embed security into the development lifecycle.

The role requires DoD/DoW experience, knowledge of NIST 800-53 and SIEM tools, and DoD 8140/8570 certifications.