DevSecOps Cybersecurity Engineer — RMF-Driven SDLC

Cydecor, Inc.

Norfolk (VA)

On-site

USD 120,000 - 145,000

Full time

20 hours ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Health and Dental Insurance

Vision and Life Insurance

401(K) + company match

Paid Time Off (PTO)

Job summary

Cydecor, Inc. is seeking a cybersecurity engineer to secure software delivery for a Navy readiness program. You will run security testing across CI/CD, triage findings, and drive fixes into code and pipelines, leveraging RMF guidance to stay aligned with the program security posture.

In this hands-on role, you will review code and dependencies, apply STIGs, enforce secure change management, and communicate risk to technical and non-technical stakeholders. A DoD/DoN background is highly valued.

Qualifications

5+ years in cybersecurity engineering, with a focus on the software development life cycle and vulnerability management.
Demonstrated experience with security testing in CI/CD pipelines using tools like SonarQube, Fortify, Checkmarx, or Snyk.
Working knowledge of RMF for DoD systems to align with the program's security posture.
IAM Level II Information Assurance Certification (DoDI 8570.01-M) or DoDM 8140.03 equivalent.

Responsibilities

Run security testing across the development pipeline (SAST, DAST, SCA, container scanning) and keep it tuned.
Triage and prioritize findings; collaborate with developers to implement remediation in code and CI/CD pipelines.
Review code and dependencies for security issues and provide remediation guidance.
Apply STIGs and hardening baselines; track vulnerability response and patching cadence.
Enforce secure change management processes and perform Security Impact Analyses for Navy systems.
Stay current on DoD cybersecurity guidance and translate risks for stakeholders.