Senior Cybersecurity Analyst — RMF, DevSecOps & Secure SDLC

Scientific Research Corporation; North Charleston (SC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical plan

Dental plan

Vision plan

401(k) match

Life insurance

Paid time off

11 holidays

Tuition reimbursement

Job summary

Scientific Research Corporation is a leading IT and engineering firm supporting government and private industry. This role focuses on integrating cybersecurity into the SDLC, reviewing designs for cyber risks, and enabling secure DevSecOps practices across software and infrastructure.

The ideal candidate will have an active TS/SCI clearance, CISSP certification, and 8+ years in cybersecurity, with strong RMF knowledge and experience communicating risk to diverse stakeholders.

Qualifications

• Active TS/SCI clearance with eligibility to maintain
• CISSP certification in good standing
• Bachelor’s degree in cybersecurity, computer science, information systems or related field
• Eight+ years of progressive cybersecurity experience
• Three+ years supporting cybersecurity in software development, DevSecOps or related programs
• Experience applying cybersecurity principles within the SDLC
• Familiarity with NIST RMF, 800-53, 800-37, 800-218 and related guidance
• Ability to communicate cybersecurity risks to developers, managers and government stakeholders

Responsibilities

• Integrate cybersecurity requirements into the software development lifecycle from requirements to deployment
• Review system, application, and architecture designs for cyber risks and compliance
• Support secure DevSecOps practices including automated security testing
• Conduct risk analysis, control validation, and remediation tracking for software and infrastructure
• Analyze vulnerability scans, SAST/DAST/CI data and coordinate mitigations
• Perform RMF activities and prepare artifacts, risk registers, and POA&Ms
• Evaluate security impacts of releases, changes, and third-party components
• Collaborate with developers to remediate security defects
• Support incident analysis, root-cause analysis, and after-action reporting
• Develop technical reports and risk briefings for stakeholders
• Mentor junior cybersecurity analysts and participate in security working groups

Skills

TS/SCI clearance

CISSP certification

Secure SDLC

Risk management

Communication to stakeholders

Education

Bachelor’s degree in cybersecurity/related field

Master’s degree (preferred)

Tools

GitLab

GitHub

Jira

Bitbucket

OpenShift

Job description

Scientific Research Corporation is a leading IT and engineering firm supporting government and private industry. This role focuses on integrating cybersecurity into the SDLC, reviewing designs for cyber risks, and enabling secure DevSecOps practices across software and infrastructure.

The ideal candidate will have an active TS/SCI clearance, CISSP certification, and 8+ years in cybersecurity, with strong RMF knowledge and experience communicating risk to diverse stakeholders.