RMF Cybersecurity Engineer: SAST & Risk Mgmt

KBR; Oklahoma City (OK); Vor Ort; USD 85.000 - 120.000; Vollzeit

Zusammenfassung

KBR seeks a Cybersecurity Practitioner to evaluate third-party software, perform risk assessments for IT and OT systems, and drive secure coding practices across development teams. The role includes static/dynamic analysis, reverse engineering, and developing tools to monitor security metrics and CONMON artifacts.

Applicants should have 3+ years in software/cybersecurity, familiarity with secure coding and risk management, and be eligible for high‑level security clearances.

Qualifikationen

• The position requires at least three (3) years of experience in software engineering, software development or a cybersecurity-related field.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six months, possess or obtain certifications such as CySA+, CGRC, Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices and ability to obtain/maintain a security clearance.

Aufgaben

• Evaluate third‑party software deliverables and assess technical compliance reports.
• Support RMF activities to assess, authorize, and monitor system risks for IT/OT environments.
• Perform SAST on source code and static binary analysis on executables.
• Reverse engineer software to identify flaws and undocumented objects.
• Develop and maintain custom software utilities to collect system information and generate CONMON artifacts.

Kenntnisse

Software development

Software assurance

Risk management

SAST

Reverse engineering

DEVSECOPS

Secure coding

Threat analysis

Vulnerability hunting

Ausbildung

Bachelor’s degree in Computer Science/Engineering

Tools

Ghidra

Binwalk

JTAG

UART

I2C

Jobbeschreibung

KBR seeks a Cybersecurity Practitioner to evaluate third-party software, perform risk assessments for IT and OT systems, and drive secure coding practices across development teams. The role includes static/dynamic analysis, reverse engineering, and developing tools to monitor security metrics and CONMON artifacts.

Applicants should have 3+ years in software/cybersecurity, familiarity with secure coding and risk management, and be eligible for high‑level security clearances.