Cybersecurity Practitioner: DevSecOps & RMF Focus

KBR Careers; Oklahoma; On-site; USD 85,000 - 120,000; Full time

Job summary

KBR is seeking a Cybersecurity Practitioner with experience in software development, software assurance, and risk management to evaluate third-party software and provide risk-mitigation recommendations for IT and OT systems.

The role involves conducting SAST on source code and static analysis on binaries, reverse engineering to identify flaws, and supporting DEVSECOPS with secure coding practices. A Secret/Top-Secret clearance is required or must be obtained within six months.

Qualifications

• Minimum three years in software engineering, development or cybersecurity field.
• Knowledge of secure coding principles and risk management methodologies.
• Ability to obtain/maintain a Secret or Top-Secret clearance.

Responsibilities

• Evaluate third-party software deliverables and assess technical compliance reports.
• Perform Static Application Security Testing (SAST) on source code and binaries.
• Reverse engineer software to identify flaws and undocumented objects.
• Develop utilities to gather system information and SCAP results, and produce CONMON artifacts.
• Support DEVSECOPS approaches and risk-based mitigation for IT/OT systems.

Skills

Software development

Software assurance

Risk management

SAST

DEVSECOPS

Secure coding

Reverse engineering

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity

Tools

Ghidra

Binwalk

JTAG

UART

I2C

SCAP tooling

Job description

KBR is seeking a Cybersecurity Practitioner with experience in software development, software assurance, and risk management to evaluate third-party software and provide risk-mitigation recommendations for IT and OT systems.

The role involves conducting SAST on source code and static analysis on binaries, reverse engineering to identify flaws, and supporting DEVSECOPS with secure coding practices. A Secret/Top-Secret clearance is required or must be obtained within six months.