Senior Cloud Cybersecurity Engineer | RMF & DevSecOps Lead

PingWind; Quantico (VA); On-site; USD 92,000 - 127,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off accruals

Parental Leave

Medical plan options with employercon

Job summary

PingWind is seeking a Senior Cybersecurity Engineer/DevSecOps to engineer and sustain security controls for OSI cloud systems and pipelines at Quantico, VA. The role supports RMF evidence, access control, vulnerability management, and continuous monitoring.

The engineer will integrate security testing into engineering workflows, develop secure architecture baselines, and coordinate with system owners, ISSMs/ISSOs, and government stakeholders to remediate risk.

Qualifications

• Requires RMF experience from system categorization through continuous monitoring and authorization maintenance.
• Experience developing RMF and authorization artifacts (Body of Evidence, SSP, RAR, POA&Ms).
• Hands-on with ACAS, HBSS, eMASS, DISA STIGs/SRGs, and vulnerability-management processes.
• Ability to implement and audit secure configuration baselines and integrate security testing into DevSecOps workflows.
• Proficiency with SIEM, centralized logging, access control, cloud security architecture, risk analysis, and continuous monitoring.

Responsibilities

• Engineer, implement, and sustain cybersecurity controls for cloud systems, apps, user access, and DevSecOps environments.
• Document and validate DISA STIG and SRG requirements, secure baselines, and change-control processes.
• Design and support vulnerability-scanning architecture, authenticated scans, remediation tracking, and continuous assessment.
• Analyze security findings; assign risk; develop and manage POA&Ms.
• Develop and sustain SIEM, logging, alerting, and monitoring capabilities for incident investigation.
• Integrate automated security checks into CI/CD and release pipelines.
• Maintain RMF artifacts and coordination with system owners and government stakeholders.

Skills

RMF processes

Vulnerability management

DevSecOps

Risk assessment

Security architecture

Stakeholder communication

Education

High school diploma or GED

CASP+ CE

CISSP

Tools

ACAS

HBSS

eMASS

SIEM

Kubernetes

AWS GovCloud

Cloud One

Terraform

Job description

PingWind is seeking a Senior Cybersecurity Engineer/DevSecOps to engineer and sustain security controls for OSI cloud systems and pipelines at Quantico, VA. The role supports RMF evidence, access control, vulnerability management, and continuous monitoring.

The engineer will integrate security testing into engineering workflows, develop secure architecture baselines, and coordinate with system owners, ISSMs/ISSOs, and government stakeholders to remediate risk.