DevSecOps Cybersecurity Engineer for Navy Systems

International Executive Service Corps; Norfolk (VA); Hybrid; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) plan with company match

Paid time off (PTO)

Job summary

Cydecor is a premier Federal Government solutions provider delivering secure software and mission-focused cybersecurity across Navy programs. We seek a cybersecurity engineer to drive security into software delivery, run testing across pipelines, and chase findings to closure under the RMF framework.

You will work with development teams, apply STIGs, review code and dependencies, and help ensure DoD accreditation and continuous monitoring for NRRE systems.

Qualifications

• 5+ years in cybersecurity engineering, with a focus on the software development life cycle and vulnerability management.
• Demonstrated experience with security testing in CI/CD pipelines using tools like SonarQube, Fortify, Checkmarx, or Snyk in Azure DevOps or comparable platforms.
• Comfortable with vulnerability scanning and remediation: STIG application (focused expertise regarding Application Security Development), scan analysis (ACAS/Nessus or equivalent), secure code review, and dependency/patch management.
• Working knowledge of RMF for DoD systems, enough to keep your work aligned with the program’s security posture.
• IAM Level II Information Assurance Certification (per DoDI 8570.01-M and SECNAV M-5239.2), or equivalent under DoDM 8140.03 at Basic or Intermediate proficiency.

Responsibilities

• Run security testing across the development pipeline (SAST, DAST, SCA) and container/image scanning, keeping it tuned to catch critical issues.
• Triage and prioritise security findings, collaborate with developers to remediate in code and CI/CD pipelines, and track through closure.
• Review code and dependencies for security issues and provide actionable remediation guidance to developers.
• Apply STIGs and hardening baselines, track vulnerability response and patching cadence, keep code and dependencies current.
• Enforce secure change management via Security Impact Analyses for Navy systems changes.
• Review DoW/Navy Cyber Tasking Orders to determine applicability to NRRE systems and coordinate with stakeholders for compliance.
• Ensure cybersecurity activities align with RMF posture and provide documentation and inputs to support accreditation and monitoring.

Skills

Cybersecurity engineering

CI/CD security

Vulnerability management

RMF knowledge

Security testing

Education

Bachelor’s degree in CS/Cybersecurity

Tools

SonarQube

Fortify

Checkmarx

Snyk

ACAS/Nessus

Job description

Cydecor is a premier Federal Government solutions provider delivering secure software and mission-focused cybersecurity across Navy programs. We seek a cybersecurity engineer to drive security into software delivery, run testing across pipelines, and chase findings to closure under the RMF framework.

You will work with development teams, apply STIGs, review code and dependencies, and help ensure DoD accreditation and continuous monitoring for NRRE systems.