Senior Cloud Security Engineer | RMF & DevSecOps Lead

PingWind; Quantico (VA); On-site; USD 92,000 - 127,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off

Parental Leave

Medical plan options

Dental Insurance

Vision Insurance

Disability Insurance

Life Insurance

401k with matching

Continuing education assistance

Wellness benefits

Employee Assistance Program

Legal Insurance

Pet Insurance

Job summary

PingWind is seeking a Senior Cybersecurity Engineer / DevSecOps Engineer to engineer and sustain security controls for OSI cloud systems and development pipelines. The role supports access control, secure configuration, vulnerability management, security monitoring, RMF evidence, and continuous monitoring.

This senior position integrates security testing and compliance into engineering and delivery workflows, develops technical security architecture and baselines, and works with system owners

Qualifications

• Experience with RMF from categorization to continuous monitoring.
• Experience developing RMF artifacts and authorization materials.
• Hands-on use of ACAS, HBSS, eMASS, DISA STIGs/SRGs, and vulnerability management.
• Experience integrating security testing into DevSecOps workflows.
• Knowledge of SIEM, logging, access control, cloud security, and continuous monitoring.
• Ability to translate findings into prioritized corrective actions for stakeholders.

Responsibilities

• Engineer, implement, and sustain cybersecurity controls for cloud systems and DevSecOps environments.
• Document STIG/SRG requirements and secure configuration baselines.
• Design vulnerability-scanning architecture and remediation tracking.
• Analyze security tool results, assign risk, and manage POA&Ms.
• Sustain SIEM, logging, and security monitoring to investigate events.
• Integrate automated security checks into infrastructure-as-code and CI/CD pipelines.
• Develop secure architectures, data-flow diagrams, and baselines.
• Support RMF activities from categorization through continuous monitoring.
• Maintain RMF artifacts such as Body of Evidence, SSP, RAR, SAP inputs, scan evidence.
• Coordinate with ISSMs/ISSOs, developers, cloud engineers, assessors, and Government stakeholders.
• Lead technical reviews, root-cause analysis, and security guidance for teams.

Skills

RMF experience

Vulnerability management

DevSecOps

Cloud security architecture

SIEM

Access control

Security monitoring

Education

High school diploma or GED

Tools

ACAS

HBSS

eMASS

DISA STIGs/SRGs

POA&Ms management

Job description

PingWind is seeking a Senior Cybersecurity Engineer / DevSecOps Engineer to engineer and sustain security controls for OSI cloud systems and development pipelines. The role supports access control, secure configuration, vulnerability management, security monitoring, RMF evidence, and continuous monitoring.

This senior position integrates security testing and compliance into engineering and delivery workflows, develops technical security architecture and baselines, and works with system owners