Senior Cybersecurity Engineer - RMF & DevSecOps Lead

Scientific Research Corporation; North Charleston, Northern (SC, KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with company match

Paid time off and holidays

Tuition reimbursement

Job summary

Scientific Research Corporation is seeking a senior cybersecurity professional to integrate secure practices across the software development lifecycle for government programs. You will review designs, perform RMF activities, coordinate remediation, and deliver technical reports to stakeholders.

The role requires TS/SCI clearance, CISSP, and extensive DevSecOps experience in fast-paced environments, with collaboration across developers and program managers on risk and security controls.

Qualifications

• Active TS/SCI clearance with eligibility throughout employment
• Active CISSP certification in good standing
• Bachelor’s degree in cybersecurity, computer science, information systems, software engineering, engineering, or a related technical field
• Eight or more years of progressive experience in cybersecurity, information assurance, application security, systems security engineering, or a related technical discipline
• Three or more years of experience supporting cybersecurity activities on software development, software modernization, systems integration, or DevSecOps programs
• Demonstrated experience applying cybersecurity principles within the SDLC, including requirements analysis, design review, development, testing, deployment, and sustainment
• Experience with security-control assessment, risk analysis, vulnerability management, and remediation tracking
• Working knowledge of NIST cybersecurity guidance and risk-management practices (RMF, 800-53, 800-37, 800-218)
• Experience reviewing or analyzing vulnerability scans, SAST/DAST/ SCA findings and remediation
• Familiarity with secure coding concepts and OWASP risks
• Experience producing cybersecurity documentation and briefing materials
• Experience obtaining ATO packages and continuous monitoring actions
• Ability to communicate cybersecurity risks effectively to developers and stakeholders
• Ability to work independently in a mission-focused government program environment

Responsibilities

• Integrating cybersecurity requirements and security controls into the SDLC from requirements through deployment and sustainment
• Reviewing system, application, interface, and architecture designs for cybersecurity risks and compliance with government requirements
• Supporting implementation and maintenance of secure DevSecOps practices, including automated security testing and continuous monitoring
• Conducting or supporting security assessments, control validation, risk analysis, and remediation tracking for software applications and infrastructure
• Analyzing vulnerability scan results, application security findings, code-scanning results, and configuration-compliance data; validate findings and coordinate mitigation actions
• Performing RMF activities, including preparation and maintenance of security documentation, assessment artifacts, risk registers, and POA&Ms
• Evaluating security impacts of software releases, configuration changes, third-party components, and architecture modifications
• Collaborating with developers to implement secure coding practices and remediate security defects
• Supporting security incident analysis, root-cause analysis, corrective-action development, and after-action reporting
• Developing technical reports, executive summaries, risk briefings, security recommendations, and status updates for stakeholders
• Providing technical mentorship and quality review for junior cybersecurity analysts
• Participating in Agile ceremonies and cybersecurity working groups

Skills

TS/SCI clearance

CISSP certification

Security communication

DevSecOps experience

SDLC cybersecurity

RMF/NIST knowledge

OWASP awareness

Independent worker

Risk communication

Education

Bachelor’s degree in a technical field

Master’s degree in cybersecurity/related field

Tools

GitLab

GitHub

Jira

Bitbucket

Docker

Kubernetes

OpenShift

Job description

Scientific Research Corporation is seeking a senior cybersecurity professional to integrate secure practices across the software development lifecycle for government programs. You will review designs, perform RMF activities, coordinate remediation, and deliver technical reports to stakeholders.

The role requires TS/SCI clearance, CISSP, and extensive DevSecOps experience in fast-paced environments, with collaboration across developers and program managers on risk and security controls.