Cybersecurity Engineer — RMF, SAST & DevSecOps

Cybersecurity Jobs; Oklahoma City (OK); On-site; USD 90,000 - 120,000; Full time

Job summary

Trinzic (KBR/Trinzic) seeks a Cybersecurity Practitioner to support RMF-based engineering across acquisition and sustainment programs at Tinker AFB, OK. You will evaluate third-party software, perform SAST, and develop CONMON artifacts to monitor security postures.

You will work with a team focusing on risk assessment, authorization, and monitoring to protect critical IT/OT systems and ensure mission success.

Qualifications

• 3+ years of experience in software engineering, software development, or cybersecurity.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six months of assignment, ability to possess or obtain one of the following certifications: CySA+, CGRC, Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices.
• Ability to obtain and maintain a Secret or Top-Secret security clearance.

Responsibilities

• Evaluate and verify third-party software deliverables, review technical compliance reports, and provide risk-mitigation recommendations for IT and OT systems.
• Support implementation of the NIST RMF by assessing, authorizing, and monitoring system risks.
• Perform SAST on source code and conduct static binary analysis on compiled executables.
• Analyze scan results to identify software weaknesses, prioritize mitigation plans, and maintain security testing tools.
• Reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects.
• Use DEVSECOPS and secure coding practices to provide technical support that directs system security engineering for acquisition and sustainment programs.
• Develop and maintain custom utilities to gather system information, consolidate logs and SCAP results, generate visual metrics, and produce CONMON artifacts.

Skills

3 years experience

Programming standards

Secure coding

Risk management

Security clearance

Education

Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity

Tools

Ghidra

Binwalk

JTAG

UART

I2C

Job description

Trinzic (KBR/Trinzic) seeks a Cybersecurity Practitioner to support RMF-based engineering across acquisition and sustainment programs at Tinker AFB, OK. You will evaluate third-party software, perform SAST, and develop CONMON artifacts to monitor security postures.

You will work with a team focusing on risk assessment, authorization, and monitoring to protect critical IT/OT systems and ensure mission success.