Senior Cybersecurity Engineer - Cloud DevSecOps & RMF

PingWind, Inc.; United States; On-site; USD 92,000 - 127,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off

Parental Leave

Medical plan options

Dental Insurance

Vision Insurance

Disability Insurance

Life Insurance

401k with matching

Continuing education assistance

Wellness benefits

529 College Savings Plan

Pet Insurance

Job summary

PingWind, Inc. is seeking a Senior Cybersecurity Engineer / DevSecOps Engineer to design and sustain security controls for OSI cloud systems and development pipelines.

You will support access control, secure configuration, vulnerability management, security monitoring, RMF evidence, and continuous monitoring. This senior role integrates security testing into engineering workflows, develops security architecture baselines, and coordinates with system owners and government stakeholders to identify

Qualifications

• NIST RMF experience from system categorization through continuous monitoring and authorization maintenance.
• Experience developing and maintaining RMF and authorization artifacts (Body of Evidence, SSP, RAR, SAP inputs, POA&Ms).
• Hands-on experience using ACAS, HBSS, eMASS, DISA STIGs/SRGs, and vulnerability-management processes.
• Experience implementing and auditing secure configuration baselines and integrating security testing into DevSecOps workflows.
• Knowledge of SIEM, centralized logging, access control, cloud security architecture, risk analysis, and continuous monitoring.
• Ability to translate findings into prioritized corrective actions and communicate technical risk to engineering and Government stakeholders.

Responsibilities

• Engineer, implement, and sustain cybersecurity controls for cloud systems, applications, user access, and DevSecOps environments.
• Implement, validate, and document DISA STIG and SRG requirements, secure configuration baselines, and configuration-control processes.
• Design and support vulnerability-scanning architecture, authenticated scans, findings analysis, remediation tracking, and continuous assessment.
• Analyze ACAS, HBSS, and related security-tool results; validate findings; assign risk; and develop and manage POA&Ms.
• Engineer and sustain SIEM, logging, alerting, audit, and security-monitoring capabilities and use them to investigate security events.
• Integrate automated security checks and testing into infrastructure-as-code, application build, CI/CD, and release pipelines.
• Develop and maintain secure architecture, network and data-flow diagrams, control implementation statements, baselines, and engineering records.
• Support NIST RMF activities from system categorization and control selection through assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts, including the Body of Evidence, SSP, RAR, SAP inputs, scan evidence, and remediation records in eMASS.
• Coordinate with system owners, ISSMs/ISSOs, developers, cloud engineers, administrators, assessors, and Government stakeholders to resolve risk.
• Lead technical reviews, root-cause analysis, corrective actions, control improvements, and security guidance for delivery teams.

Job description

PingWind, Inc. is seeking a Senior Cybersecurity Engineer / DevSecOps Engineer to design and sustain security controls for OSI cloud systems and development pipelines.

You will support access control, secure configuration, vulnerability management, security monitoring, RMF evidence, and continuous monitoring. This senior role integrates security testing into engineering workflows, develops security architecture baselines, and coordinates with system owners and government stakeholders to identify