DoD RMF Cybersecurity Engineer (DevSecOps)

Sphera; United States; On-site; USD 112,000 - 178,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Health Savings Account

401(k) Retirement Plan with Company M

Life Insurance

Disability Insurance

Critical Illness Insurance

Accident Insurance

Paid Time Off

Job summary

Sphera seeks a Cybersecurity Engineer to own the security posture for software deployed in federal and DoD environments. You will drive RMF/ATO lifecycle management, STIG implementation, vulnerability remediation, and DevSecOps integration across Sphera's products.

Ideal candidates bring hands-on federal security experience, familiarity with NIST SP 800-53 Rev. 5, and a strong ability to translate findings into actionable guidance for engineering teams and government stakeholders.

Qualifications

• U.S. citizen required; active DoD security clearance or ability to obtain and maintain one.

Responsibilities

• Lead cybersecurity for software in secure federal/DoD environments and ensure government policy compliance.
• Execute RMF activities from system categorization to ATO documentation.
• Implement, validate, and monitor STIGs across layers.
• Mitigate OWASP Top 10 and application‑level vulnerabilities.
• Integrate security tooling into CI/CD pipelines and DevSecOps maturity.

Skills

Security mindset

Communication with stakeholders

DevSecOps integration

Vulnerability remediation

RMF/ATO experience

Education

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field

DoD 8570/8140 IAT Level II+ certification (e.g., Security+, CISSP)

Tools

SCC (DISA)

STIG Viewer

Nessus/ACAS

Tenable.sc

SIEM/IDS/IPS tools

Job description

Sphera seeks a Cybersecurity Engineer to own the security posture for software deployed in federal and DoD environments. You will drive RMF/ATO lifecycle management, STIG implementation, vulnerability remediation, and DevSecOps integration across Sphera's products.

Ideal candidates bring hands-on federal security experience, familiarity with NIST SP 800-53 Rev. 5, and a strong ability to translate findings into actionable guidance for engineering teams and government stakeholders.