Naval Cybersecurity Engineer: Secure SDLC & DevSecOps

Ironclad-Technology-Services-LLC; Norfolk (VA); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

401(k) match

PTO

Holidays

Tuition assistance

Job summary

Cydecor is seeking a cybersecurity engineer to secure software delivery on a large Navy readiness program. You’ll run security testing across the pipeline, triage findings, and guide remediation, collaborating with development teams and aligning with RMF.

This hands-on role requires 5+ years in cybersecurity, experience with SAST/DAST/SCA tools (SonarQube, Fortify, Checkmarx, Snyk) in CI/CD, and RMF knowledge. DoD Secret clearance preferred; bachelor’s degree in CS or related field.

Qualifications

• 5+ years in cybersecurity engineering focused on SDLC and vulnerability management.
• Experience with security testing in CI/CD using SAST/DAST and SCA tools.
• Working knowledge of RMF for DoD systems and DoDI 8570.01-M IAM Level II.

Responsibilities

• Run security testing across the development pipeline (SAST, DAST, SCA, container scanning).
• Triage findings, prioritize fixes, and coordinate remediation in CI/CD.
• Review code/dependencies for security issues and provide remediation guidance.
• Apply STIGs and hardening baselines; track vulnerability response and patching cadence.
• Enforce secure change management and perform Security Impact Analyses.
• Review Navy directives to determine applicability and coordinate for compliance.
• Maintain RMF posture documentation to support accreditation and monitoring.

Skills

Cybersecurity engineering

Security testing in CI/CD

Vulnerability management

RMF knowledge

Stakeholder communication

Education

Bachelor’s degree in CS/Cybersecurity/Engineering

IAM Level II Certification

Tools

SonarQube

Fortify

Checkmarx

Snyk

Azure DevOps

ACAS/Nessus

Job description

Cydecor is seeking a cybersecurity engineer to secure software delivery on a large Navy readiness program. You’ll run security testing across the pipeline, triage findings, and guide remediation, collaborating with development teams and aligning with RMF.

This hands-on role requires 5+ years in cybersecurity, experience with SAST/DAST/SCA tools (SonarQube, Fortify, Checkmarx, Snyk) in CI/CD, and RMF knowledge. DoD Secret clearance preferred; bachelor’s degree in CS or related field.