Senior Cybersecurity Engineer / DevSecOps Engineer

PingWind; Quantico (VA); On-site; USD 92,000 - 127,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off accruals

Parental Leave

Medical plan options with employercon

Job summary

PingWind is seeking a Senior Cybersecurity Engineer/DevSecOps to engineer and sustain security controls for OSI cloud systems and pipelines at Quantico, VA. The role supports RMF evidence, access control, vulnerability management, and continuous monitoring.

The engineer will integrate security testing into engineering workflows, develop secure architecture baselines, and coordinate with system owners, ISSMs/ISSOs, and government stakeholders to remediate risk.

Qualifications

• Requires RMF experience from system categorization through continuous monitoring and authorization maintenance.
• Experience developing RMF and authorization artifacts (Body of Evidence, SSP, RAR, POA&Ms).
• Hands-on with ACAS, HBSS, eMASS, DISA STIGs/SRGs, and vulnerability-management processes.
• Ability to implement and audit secure configuration baselines and integrate security testing into DevSecOps workflows.
• Proficiency with SIEM, centralized logging, access control, cloud security architecture, risk analysis, and continuous monitoring.

Responsibilities

• Engineer, implement, and sustain cybersecurity controls for cloud systems, apps, user access, and DevSecOps environments.
• Document and validate DISA STIG and SRG requirements, secure baselines, and change-control processes.
• Design and support vulnerability-scanning architecture, authenticated scans, remediation tracking, and continuous assessment.
• Analyze security findings; assign risk; develop and manage POA&Ms.
• Develop and sustain SIEM, logging, alerting, and monitoring capabilities for incident investigation.
• Integrate automated security checks into CI/CD and release pipelines.
• Maintain RMF artifacts and coordination with system owners and government stakeholders.

Skills

RMF processes

Vulnerability management

DevSecOps

Risk assessment

Security architecture

Stakeholder communication

Education

High school diploma or GED

CASP+ CE

CISSP

Tools

ACAS

HBSS

eMASS

SIEM

Kubernetes

AWS GovCloud

Cloud One

Terraform

Job description

Location: Russell-Knox Building (RKB) - Quantico, VA

PWS Task Area: PWS 2.7 - OSI Cloud Cyber Support
Required Clearance: Active Top Secret
Certifications: Security+ CE or higher (for example, CASP+ CE or CISSP)
Required Education: High school diploma or GED.
Required Experience: Minimum of three (3) years of specialized cybersecurity engineering, Risk Management Framework, vulnerability management, or DevSecOps experience in Federal or DoW environments.

Position Description

Ailani Wind Joint Venture is seeking a Senior Cybersecurity Engineer / DevSecOps Engineer to engineer and sustain security controls for OSI cloud systems and development pipelines. The engineer supports access control, secure configuration, vulnerability management, security monitoring, RMF evidence, and continuous monitoring. This senior position integrates security testing and compliance into engineering and delivery workflows, develops technical security architecture and baselines, and works with system owners and technical teams to identify, prioritize, document, and remediate risk.

Primary Responsibilities

• Engineer, implement, and sustain cybersecurity controls for cloud systems, applications, user access, and DevSecOps environments.
• Implement, validate, and document DISA STIG and SRG requirements, secure configuration baselines, and configuration-control processes.
• Design and support vulnerability-scanning architecture, authenticated scans, findings analysis, remediation tracking, and continuous assessment.
• Analyze ACAS, HBSS, and related security-tool results; validate findings; assign risk; and develop and manage POA&Ms.
• Engineer and sustain SIEM, logging, alerting, audit, and security-monitoring capabilities and use them to investigate security events.
• Integrate automated security checks and testing into infrastructure-as-code, application build, CI/CD, and release pipelines.
• Develop and maintain secure architecture, network and data-flow diagrams, control implementation statements, baselines, and engineering records.
• Support NIST RMF activities from system categorization and control selection through assessment, authorization, and continuous monitoring.
• Develop and maintain RMF artifacts, including the Body of Evidence, SSP, RAR, SAP inputs, and remediation records in eMASS.
• Coordinate with system owners, ISSMs/ISSOs, developers, cloud engineers, administrators, assessors, and Government stakeholders to resolve risk.
• Lead technical reviews, root-cause analysis, corrective actions, control improvements, and security guidance for delivery teams.

Required Qualifications

• Demonstrated NIST RMF experience from system categorization through continuous monitoring and authorization maintenance.
• Experience developing and maintaining RMF and authorization artifacts, including a Body of Evidence, SSP, RAR, SAP inputs, and POA&Ms.
• Hands-on experience using ACAS, HBSS, eMASS, DISA STIGs/SRGs, and vulnerability-management processes.
• Experience implementing and auditing secure configuration baselines and integrating security testing into DevSecOps workflows.
• Knowledge of SIEM, centralized logging, access control, cloud security architecture, risk analysis, and continuous monitoring.
• Ability to translate findings into prioritized corrective actions and communicate technical risk clearly to engineering and Government stakeholders.

Desired Qualifications

• Current CASP+ CE, CISSP, or comparable advanced cybersecurity certification.
• Experience securing AWS GovCloud, Cloud One, container, Kubernetes, and infrastructure-as-code environments.
• Experience with automated policy, code, dependency, container, infrastructure, and configuration security testing.
• Experience supporting DAF or AFOSI authorization packages, assessors, and continuous-monitoring programs.
• Experience providing technical leadership and mentoring cybersecurity and DevSecOps personnel.

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL. www.PingWind.com

Our benefits include:

• Eleven Federal Holidays
• Paid Time Off accrued each pay period
• Parental Leave
• Three medical plan choices with generous employer contribution
• Dental and Vision Insurance
• Company paid Short-Term and Long-Term Disability
• Company paid Life and AD&D Insurance
• 401k with competitive matching and vesting schedule
• Continuing education assistance
• Short Term / Long Term Disability & Life Insurance
• Medical, Dependent Care and Commuter Flexible Spending Accounts
• Employee Assistance Program
• Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
• 529 College Savings Plan
• Legal Insurance
• Pet Insurance

Salary Range

$92-$127K

The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, certifications, experience, as well as internal equity mapping and alignment with market data, or other applicable laws.

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.