Cybersecurity Engineer – DoD RMF & DevSecOps (DC Area)

Finch AI; Washington (District of Columbia); Hybrid; USD 130.000 - 225.000; Vollzeit

Zusammenfassung

Finch AI in Washington, DC metro area seeks a senior cybersecurity professional to design, implement and maintain security controls for mission systems in a federal environment. You will conduct vulnerability assessments, support RMF/A&A activities, and coordinate with the SOC on security events.

Relocation to DC area and onsite/hybrid work are required by program needs. Required DoD/DHS/FBI missions experience, NIST 800-53 knowledge, and relevant certifications (Security+, CISSP, CASP+).

Qualifikationen

• Experience implementing cybersecurity controls in a federal/DoD environment.
• Knowledge of NIST 800-53, RMF, and vulnerability management tools.
• DoD/DHS/FBI mission support experience preferred.

Aufgaben

• Design, implement, and maintain security controls to protect mission systems and data.
• Conduct vulnerability assessments, security scanning, and remediation tracking.
• Support A&A/RMF activities, including SSPs, POA&Ms, and continuous monitoring documentation.
• Monitor security events and respond to incidents with the SOC.
• Implement and maintain endpoint, network, and cloud security tools.
• Support compliance with NIST 800-53, CMMC, DoD RMF.
• Collaborate with engineering to embed security into the development lifecycle (DevSecOps).

Kenntnisse

NIST 800-53

RMF

Vulnerability management

DoD/DoW experience

Security+ / CISSP / CASP+

Cloud security (AWS/Azure GovCloud)

Ausbildung

Bachelor's degree in a related field

Jobbeschreibung

Finch AI in Washington, DC metro area seeks a senior cybersecurity professional to design, implement and maintain security controls for mission systems in a federal environment. You will conduct vulnerability assessments, support RMF/A&A activities, and coordinate with the SOC on security events.

Relocation to DC area and onsite/hybrid work are required by program needs. Required DoD/DHS/FBI missions experience, NIST 800-53 knowledge, and relevant certifications (Security+, CISSP, CASP+).