Senior Cloud Security Engineer (DevSecOps)

PingWind, Inc.; Quantico (VA); On-site; USD 92,000 - 127,000; Full time

Benefits offered by this job

Health Insurance

401k with matching

Paid time off

Job summary

PingWind, Inc. is seeking a Senior Cybersecurity Engineer/DevSecOps to engineer and sustain security controls for OSI cloud systems and development pipelines. You will integrate security testing and RMF artifacts into engineering workflows, supporting risk management and continuous monitoring.

The role emphasizes DISA STIG/SRG compliance, vulnerability management, and secure configurations within federal environments. Collaboration with government stakeholders is essential.

Qualifications

• Experience with RMF from system categorization through continuous monitoring and authorization maintenance.
• Experience developing RMF artifacts like Body of Evidence, SSP, RAR, SAP inputs, POA&M.
• Hands-on use of ACAS, HBSS, eMASS, and vulnerability-management processes.
• Experience implementing secure configuration baselines and integrating security testing into DevSecOps.
• Knowledge of SIEM, centralized logging, cloud security architecture, risk analysis, and continuous monitoring.

Responsibilities

• Engineer and sustain cybersecurity controls for OSI cloud systems and DevSecOps environments.
• Implement and document DISA STIG/SRG requirements and secure baselines.
• Design vulnerability-scanning architecture, authenticated scans, remediation tracking, and continuous assessment.
• Analyze security tool results, assign risk, and manage POA&Ms and remediation records.
• Develop and maintain RMF artifacts and evidence in eMASS.
• Coordinate with system owners, ISSMs/ISSOs, developers, and government stakeholders to resolve risk.
• Lead technical reviews and drive corrective actions and security guidance for delivery teams.
• Integrate automated security checks into infrastructure-as-code, CI/CD, and release pipelines.

Skills

RMF experience

Risk analysis

DevSecOps

Security monitoring

Communication of risk

Education

High school diploma or GED

Tools

ACAS

HBSS

eMASS

DISA STIGs/SRGs

SIEM

Job description

PingWind, Inc. is seeking a Senior Cybersecurity Engineer/DevSecOps to engineer and sustain security controls for OSI cloud systems and development pipelines. You will integrate security testing and RMF artifacts into engineering workflows, supporting risk management and continuous monitoring.

The role emphasizes DISA STIG/SRG compliance, vulnerability management, and secure configurations within federal environments. Collaboration with government stakeholders is essential.