Senior DevSecOps Cybersecurity Engineer

Jobtailor; California (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking a cybersecurity engineering lead to guide DevSecOps in design, development, and production for DoD programs. You will oversee RMF activities, assess CVEs, and ensure cloud environments meet IL5/IL6 requirements in production.

Ideal candidates possess a DoD Secret clearance, a strong background in RMF and NIST 800-53 controls, and the ability to communicate complex risks to both technical and executive stakeholders.

Qualifications

• DoD Secret Clearance (able to obtain/maintain)
• 7+ years in cybersecurity, information assurance, DevSecOps or related defense experience
• Extensive RMF implementation experience
• Strong understanding of IL5/IL6 cloud environments and related cybersecurity requirements
• Experience supporting ATO and continuous monitoring activities
• Experience with DoD cybersecurity documentation and authorization artifacts
• Ability to communicate technical issues to both technical and executive audiences

Responsibilities

• Lead cybersecurity engineering efforts for DevSecOps软件 delivery
• Provide cybersecurity guidance across the full software development lifecycle from design to production
• Evaluate architectures, components, and pipelines for compliance with DoD cyber requirements
• Collaborate with development, platform, cloud and infrastructure teams to integrate security
• Assess CVEs from automated scans and security tests, and recommend mitigations
• Analyze risk, exploitability, and remediation options for mission systems
• Develop POA&M recommendations when remediation isn’t feasible
• Support RMF activities across development, test, staging and production
• Secure software release processes into IL5 and IL6 production environments
• Develop and maintain CSS, SSPs and authorization artifacts

Skills

Cybersecurity Engineering

RMF

CVEs remediation

NIST 800-53

DoD cybersecurity policies

Communication to executives

Education

Bachelor's degree in engineering / CS / information systems / cybersecurity

Job description

• Serve as the primary cybersecurity engineering lead supporting DevSecOps software delivery efforts.
• Provide cybersecurity guidance throughout the software development lifecycle from design through production deployment.
• Evaluate system architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements.
• Partner with development, platform, cloud, and infrastructure teams to ensure security is integrated into all phases of delivery.
• Assess Common Vulnerabilities and Exposures (CVEs) identified through automated scanning, security testing, and cybersecurity reviews.
• Analyze operational impact, exploitability, mission risk, and remediation options for vulnerabilities affecting mission systems.
• Develop mitigation strategies and Plans of Action and Milestones (POA&M) recommendations when immediate remediation is not feasible.
• Support Risk Management Framework (RMF) activities across development, test, staging, and production environments.
• Secure software release processes into IL5 and IL6 production environments.
• Support development and maintenance of cybersecurity documentation including Cybersecurity Strategies (CSS), System Security Plans (SSPs), authorization package artifacts, and supporting cybersecurity documentation.

Requirements

• Able to obtain and maintain a DoD Secret clearance
• Bachelor's degree in engineering, computer science, information systems, cybersecurity or related technical field
• 7+ years of cybersecurity, information assurance, DevSecOps, system security engineering, or related defense experience
• Extensive experience implementing and supporting the Risk Management Framework (RMF)
• Strong understanding of NIST 800-53 security controls and DoD cybersecurity policies
• Demonstrated experience evaluating, explaining, mitigating, and remediating Common Vulnerabilities and Exposures (CVEs)
• Experience supporting software deployments within accredited government production environments
• Strong understanding of IL5 and IL6 cloud environments and associated cybersecurity requirements
• Experience supporting ATO and continuous monitoring activities
• Experience working directly with government cybersecurity organizations and mission stakeholders
• Ability to communicate technical cybersecurity issues to both technical and executive audiences
• Strong written communication skills supporting cybersecurity documentation, risk acceptance packages, and authorization artifacts.

Core Competencies

Demonstrates expertise in Cybersecurity Engineering, focusing on DevSecOps practices and compliance with DoD cybersecurity requirements. Proficient in evaluating vulnerabilities, implementing Risk Management Framework (RMF) activities, and developing cybersecurity documentation.

Highest-signal resume keywords

• Cybersecurity Engineering
• Risk Management Framework (RMF)
• Common Vulnerabilities and Exposures (CVEs)
• NIST 800-53 Security Controls
• IL5 and IL6 Cloud Environments

ATS Optimization Keywords

Hard Skills

• Cybersecurity
• Information Assurance
• System Security Engineering
• Vulnerability Assessment
• Security Testing
• Mitigation Strategies
• Cybersecurity Documentation
• Software Deployment
• Compliance Evaluation
• Risk Analysis

Soft Skills

• Technical Communication
• Written Communication

Certifications & Qualifications

• DoD Secret Clearance

Industry Keywords

• DevSecOps
• DoD Cybersecurity Policies
• Authorization to Operate (ATO)
• Continuous Monitoring
• Cybersecurity Strategies (CSS)
• System Security Plans (SSPs)