Navy Cybersecurity Engineer: DevSecOps & RMF Expert

Cydecor, Inc.; Norfolk (VA); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health and dental insurance

Vision and life insurance

Short-term & long-term disability

401(K) + company match

Paid Time Off (PTO)

Paid company holidays

Tuition and professional development

Job summary

Cydecor is seeking a Cybersecurity Engineer to secure the software delivery lifecycle on a Navy readiness program. You’ll run security testing across CI/CD, triage findings, drive remediation with developers, and help build security into design, build, test, and deployment.

You’ll work under the Cybersecurity Lead Engineer with RMF guidance, review code, and ensure accurate documentation for accreditation and continuous monitoring.

Qualifications

• 5+ years in cybersecurity engineering focusing on SDLC and vulnerability management.
• Experience with security testing in CI/CD pipelines using tools like SonarQube, Fortify, Checkmarx, or Snyk in Azure DevOps or comparable platforms.
• Comfortable with vulnerability scanning and remediation: STIG application, scan analysis (ACAS/Nessus or equivalent), secure code review, and dependency/patch management.
• Working knowledge of RMF for DoD systems to align with security posture.
• IAM Level II Information Assurance Certification or equivalent under DoDM 8140.03 at Basic/Intermediate proficiency.

Responsibilities

• Run security testing across the development pipeline, SAST, DAST, software composition analysis, and container/image scanning.
• Triage and prioritize security findings, collaborate with developers to implement remediation throughout the code and CI/CD pipeline.
• Review code and dependencies for security issues and provide remediation guidance.
• Apply STIGs and baselines, track vulnerability response and patching cadence.
• Enforce secure change management by performing Security Impact Analyses for changes to Navy systems.
• Review Navy directives to determine applicability and coordinate with stakeholders for compliance.
• Ensure cybersecurity activities align with RMF posture and support accreditation and continuous monitoring.

Skills

Cybersecurity engineering

Vulnerability management

CI/CD security

Security testing

Education

Bachelor's degree in computer science, cybersecurity, engineering, or related field

Tools

SonarQube

Fortify

Checkmarx

Snyk

Azure DevOps

Job description

Cydecor is seeking a Cybersecurity Engineer to secure the software delivery lifecycle on a Navy readiness program. You’ll run security testing across CI/CD, triage findings, drive remediation with developers, and help build security into design, build, test, and deployment.

You’ll work under the Cybersecurity Lead Engineer with RMF guidance, review code, and ensure accurate documentation for accreditation and continuous monitoring.