Cybersecurity Engineer – DoD RMF & DevSecOps (DC Area)

Finch AI; Washington (District of Columbia); Hybrid; USD 130,000 - 225,000; Full time

Job summary

Finch AI in Washington, DC metro area seeks a senior cybersecurity professional to design, implement and maintain security controls for mission systems in a federal environment. You will conduct vulnerability assessments, support RMF/A&A activities, and coordinate with the SOC on security events.

Relocation to DC area and onsite/hybrid work are required by program needs. Required DoD/DHS/FBI missions experience, NIST 800-53 knowledge, and relevant certifications (Security+, CISSP, CASP+).

Qualifications

• Experience implementing cybersecurity controls in a federal/DoD environment.
• Knowledge of NIST 800-53, RMF, and vulnerability management tools.
• DoD/DHS/FBI mission support experience preferred.

Responsibilities

• Design, implement, and maintain security controls to protect mission systems and data.
• Conduct vulnerability assessments, security scanning, and remediation tracking.
• Support A&A/RMF activities, including SSPs, POA&Ms, and continuous monitoring documentation.
• Monitor security events and respond to incidents with the SOC.
• Implement and maintain endpoint, network, and cloud security tools.
• Support compliance with NIST 800-53, CMMC, DoD RMF.
• Collaborate with engineering to embed security into the development lifecycle (DevSecOps).

Skills

NIST 800-53

RMF

Vulnerability management

DoD/DoW experience

Security+ / CISSP / CASP+

Cloud security (AWS/Azure GovCloud)

Education

Bachelor's degree in a related field

Job description

Finch AI in Washington, DC metro area seeks a senior cybersecurity professional to design, implement and maintain security controls for mission systems in a federal environment. You will conduct vulnerability assessments, support RMF/A&A activities, and coordinate with the SOC on security events.

Relocation to DC area and onsite/hybrid work are required by program needs. Required DoD/DHS/FBI missions experience, NIST 800-53 knowledge, and relevant certifications (Security+, CISSP, CASP+).