Federal DoD Cybersecurity Engineer RMF/DevSecOps

Sphera Solutions, Inc.; United States; Remote; USD 112,000 - 178,000; Full time

Benefits offered by this job

Medical insurance

Dental and Vision

HSA

401(k) matching

Life Insurance

Disability Insurance

Flexible working hours

Paid time off

Job summary

Sphera Solutions, Inc. in the United States is seeking a Cybersecurity Engineer to join the DevOps squad, owning security compliance for software deployed in federal environments and DoD.

You will drive RMF/ATO lifecycle management, implement STIGs, and ensure continuous readiness. The role requires hands-on experience with federal security controls, vulnerability management, and integrating security into CI/CD pipelines.

Qualifications

• U.S. citizen required; active DoD security clearance or ability to obtain and maintain one.
• 3–5 years of hands-on cybersecurity experience in federal, DoD, or similarly regulated environments.
• Strong knowledge of secure federal/DoD environments and security requirements.
• Experience supporting RMF processes and ATO package preparation for federal/DoD systems.
• Proficiency with STIGs using DISA-approved tools (SCC, STIG Viewer, Nessus/ACAS)
• Familiarity with FedRAMP Moderate and mapping to NIST SP 800-53 Rev. 5.
• Experience with vulnerability tools (Tenable.sc, Nessus, ACAS) in federal environments.
• DevSecOps experience integrating SAST/DAST/SCA into CI/CD pipelines.
• PKI, CAC/PIV authentication, and certificate management familiarity.

Responsibilities

• Lead cybersecurity for software in secure federal and DoD environments, ensuring compliance with government policies and accreditation expectations.
• Execute RMF activities including system categorization, security control selection, implementation, assessment, and ATO documentation.
• Implement, configure, and validate STIGs across layers using DISA-approved or equivalent tooling.
• Mitigate OWASP Top 10 and application-layer vulnerabilities across services.
• Monitor security controls, scan vulnerabilities, and coordinate remediation with development and DevOps.
• Manage POA&Ms, coordinating with government security stakeholders and internal teams.
• Support FedRAMP and FISMA compliance, aligning controls with NIST SP 800-53 Rev. 5.
• Integrate security tooling into CI/CD pipelines, advancing DevSecOps maturity.
• Collaborate on threat modeling, security design reviews, and application security assessments.
• Maintain SSPs and ATO documentation packages in alignment with federal requirements.
• Lead incident response activities for security events in secure government environments.

Skills

RMF/ATO management

STIG implementation

Vulnerability remediation

DevSecOps integration

FedRAMP/FISMA

NIST SP 800-53

SCC/Nessus/ACAS

CI/CD security

DoD clearance

Education

Bachelor's degree in CS/Info Security

Tools

SCC

STIG Viewer

Nessus

ACAS

Tenable.sc

Job description

Sphera Solutions, Inc. in the United States is seeking a Cybersecurity Engineer to join the DevOps squad, owning security compliance for software deployed in federal environments and DoD.

You will drive RMF/ATO lifecycle management, implement STIGs, and ensure continuous readiness. The role requires hands-on experience with federal security controls, vulnerability management, and integrating security into CI/CD pipelines.