Senior Cyber Security Engineer — RMF/ATO Leader (Remote)

constelliscareers; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Comprehensive benefits package

Flexible remote work environment

Professional development opportunities

Job summary

Constellis is seeking a Senior Cyber Security Engineer to bridge compliance and engineering, own the security workstream end-to-end, and embed automation into CI/CD pipelines for the LEXSO platform.

You will work with backend and frontend engineers to harden microservices, drive risk remediation, and report status to leadership while maintaining security controls per RMF/NIST standards.

Qualifications

• 8+ years of experience in Cyber Security Engineering or DevSecOps.
• Proven track record of achieving ATO for a software system in a DoD/Federal environment.
• Hands-on RMF, NIST 800-53, and DISA STIGs experience.
• Scripting proficiency (Python, Bash) for automation.
• Experience with vulnerability scanning tools (ACAS/Nessus, SonarQube, Burp Suite).
• Strong Linux security knowledge (SELinux, iptables, hardening).
• CI/CD and Container Security experience (GitLab CI, Jenkins, Docker/K8s).
• Ability to own security workstreams end-to-end and report to leadership.

Responsibilities

• Own the LEXSO cybersecurity program end-to-end from gap identification to implementation tracking.
• Report cyber risk posture and remediation progress to leadership in actionable terms.
• Define and maintain the cybersecurity requirements backlog and progress cadence.
• Lead RMF execution to achieve and maintain ATO for the LEXSO platform.
• Implement security controls per NIST SP 800-53 and DoD SRG/STIGs.
• Generate artifacts for eMASS (SSPs, POAMs, SARs) and maintain them.
• Conduct vulnerability assessments using ACAS and SCC for gaps.
• Integrate SAST/DAST security testing into GitLab/GitHub CI/CD pipelines.
• Develop scripts (Python/Bash/Ansible) to automate patching on Linux servers.
• Implement container security scans for Docker/Kubernetes environments.

Skills

Cyber Security Engineering

DevSecOps

RMF

NIST 800-53

Bash/Python scripting

CI/CD

Container Security

DoD/Federal environments

Education

Bachelor's degree in Computer Science or related field

Tools

ACAS/Nessus

SonarQube

Burp Suite

GitLab CI

Jenkins

Kubernetes

Docker

Job description

Constellis is seeking a Senior Cyber Security Engineer to bridge compliance and engineering, own the security workstream end-to-end, and embed automation into CI/CD pipelines for the LEXSO platform.

You will work with backend and frontend engineers to harden microservices, drive risk remediation, and report status to leadership while maintaining security controls per RMF/NIST standards.