DevSecOps Cybersecurity Engineer - RMF & SAST Expert

KBR

Oklahoma

On-site

USD 90,000 - 140,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

KBR is seeking a Cybersecurity practitioner with software development and risk management experience to evaluate third-party software, assess compliance, and provide risk-mitigation recommendations for IT and OT systems. The role focuses on RMF implementation, SAST on source code, reverse engineering, and secure DevSecOps practices to support acquisition and sustainment programs.

The candidate will develop custom utilities to gather system information, consolidate SCAP results, generate visual

Qualifications

At least three years of experience in software engineering or cybersecurity.
Understanding of legacy and modern programming standards, secure coding principles and risk management methodologies.
Ability to obtain and maintain a Secret or Top-Secret clearance within six months.

Responsibilities

Evaluate third-party software deliverables and assess technical compliance reports.
Provide risk-mitigation recommendations for IT and OT systems.
Implement NIST RMF to assess, authorize, and monitor system risk.
Perform SAST on source code and static binary analysis.
Reverse engineer software to identify flaws and undocumented objects.
Develop and maintain utilities to gather system information and consolidate SCAP results.
Produce Continuous Monitoring artifacts and visual metrics.