Senior Cybersecurity Engineer - Cloud & DevSecOps

Raft; United States; On-site; USD 150,000 - 170,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) match

PTO + holidays

Education & training

Job summary

Raft is seeking a Senior Engineer to advance cybersecurity capabilities, implement and maintain security solutions, participate in security testing, and assist with incident response. You will contribute to IAM, SIEM, IaC, and CaC implementations, container hardening, and CI/CD security across AWS environments.

The role requires 5+ years of hands-on security engineering, experience with Linux/container hardening, and strong DevSecOps within GitLab pipelines.

Qualifications

• 5+ years implementing IAM, SIEM, IaC, and CaC solutions such as Okta, Keycloak, Splunk, ELK, Terraform, Puppet, Chef, or MITRE SAF
• 2+ years configuring & maintaining security tooling such as vulnerability & compliance scanners, SAST & DAST, EDR, audit logging
• 2+ years of experience with AWS cloud security offerings (CloudTrail, CloudWatch, Inspector, GuardDuty, Shield, Secrets Manager)
• 2+ years implementing automated RMF controls (NIST 800-53) in container or VM images
• Experience securing Linux VMs and containers
• CI/CD pipelines (Gitlab Pipelines)
• Knowledge of secure architectures, virtualization, cloud tech, app security, encryption, IPS/IDS
• Defense-in-depth security engineering & testing
• DevSecOps within CI/CD pipelines
• Kubernetes & Docker with scanning tools (TwistLock, Trivy, Zarf, JFrog Xray, Anchore)
• DISA STIGs/SRGs or similar hardening practices
• SBOMs, PPS lists, data flow & network diagrams, SSPs
• Willing to work in classified environments (SCIF) quarterly
• Stay current with industry trends & give recommendations
• CompTIA Security+ or DoD 8570 IAT II+ within 90 days

Responsibilities

• Implement and maintain security solutions in the cybersecurity domain
• Participate in security testing and incident response activities
• Collaborate on DevSecOps practices within CI/CD pipelines
• Hardening of Linux VMs and containers
• Support RMF/NIST 800-53 automated validations in container/VM images
• Work with AWS security services and cloud-native tooling

Skills

IAM

SIEM

IaC

CaC

Okta

Keycloak

Splunk

Terraform

Puppet

Docker

Tools

Kubernetes

Trivy

TwistLock

JFrog Xray

Anchore

Job description

Raft is seeking a Senior Engineer to advance cybersecurity capabilities, implement and maintain security solutions, participate in security testing, and assist with incident response. You will contribute to IAM, SIEM, IaC, and CaC implementations, container hardening, and CI/CD security across AWS environments.

The role requires 5+ years of hands-on security engineering, experience with Linux/container hardening, and strong DevSecOps within GitLab pipelines.