Staff Cyber Security Engineer - TS/SCI

Sunayu Llc; Bethesda (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical plan options

Dental & Vision

HSA & FSA

401k with match

Paid time off

Job summary

Sunayu, LLC is seeking a Cyber Security Engineer to support DoD/IC programs at the Bethesda, MD client site. The role focuses on hardening Linux, securing Kubernetes, and integrating security into CI/CD pipelines within an Agile environment.

The position requires TS/SCI clearance with polygraph, DoD 8570 IAT certifications, and hands-on experience with RMF, STIGs, and cloud security. On-site with some remote flexibility based on client needs.

Qualifications

• Active TS/SCI with polygraph required.
• DoD 8570 IAT and IAT Level II or higher certification required (e.g., CCNA Security, CySA+, Security+ CE, CISSP).
• At least 5 years of Linux hardening experience and DISA STIG application.

Responsibilities

• Review and provide feedback on system cybersecurity artifacts and BOE results.
• Perform periodic vulnerability assessments for cloud-based systems.
• Implement and manage security controls for containerized apps and underlying cloud infrastructure.
• Collaborate with DevSecOps to ensure secure coding and CI/CD integration.
• Develop scripts and automation for STIG compliance and validation.
• Support Government cybersecurity officials in preparing ATO/ IATT packages.
• Stay updated on emerging cloud security threats and best practices.

Skills

Kubernetes security

CI/CD security

Bash

Python

Security best practices

RMF/DoD frameworks

NIST 800-37/800-53

Cloud security

Vulnerability management

Education

Bachelor’s degree in Cybersecurity/CS/IA/Engineering

Tools

Kubernetes

CI/CD tools

Nessus

Splunk

Fortify/Checkmarx/SonarQube

Job description

Location: Bethesda, MD

Category: Cyber Security Engineer
Travel Required:No
Remote Type: No
Clearance: TS/SCI

While most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. The percentage of remote work will vary based on client requirements/deliverables.

Candidates must have a demonstrated ability to work in a dynamic and challenging environment and possess a solid understanding of the software development life cycle all while working within an Agile framework.

Primary Responsibilities

• You will work closely with the team on the following key tasks
• Collect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts
• Collect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence (BOE) results required to support DoD & IC RMF cybersecurity authorization processes
• Conduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems
• Implement and manage security controls for containerized applications and the underlying cloud-based infrastructure
• Collaborate with DevSecOps, infrastructure, and software development teams to ensure secure coding and engineering practices
• Ensure integration of security measures into software development processes, CI/CD pipelines, and engineering tools
• Develop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation
• Implement and manage continuous monitoring solutions of cloud-based architectures
• Support Government cybersecurity officials & program personnel in preparing cybersecurity packages, including Interim Authority to Test (IATT) packages, Authority to Operate (ATO) packages, and Change Requests (CRs)
• Stay current with emerging cloud security threats, technologies, and best practices

Basic Qualifications

• Clearance: Active or current Top Secret with SCI eligibility and the ability to obtain Polygraph
  Education & Experience: Bachelor’s degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or related technical discipline and 8-12 years of relevant experience OR Master’s degree with 6-10 years of relevant experience. Additional years of experience may be considered in lieu of a degree. ISSO experience must be supplemented with demonstrated technical expertise.
• Certification: At least one DoD 8570.01-M IAT and one IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associate) and the ability to obtain Privileged User Account (PUA)/elevated access per DoD 8570 policy, and Linux+ certification
• At least 5 years of experience hardening Linux hosts and applying DISA STIG
• Demonstrated experience securing Kubernetes platforms (secrets management, RBAC, etc.) and integrating security into CI/CD pipelines and containers
• Demonstrated experience developing A&A packages to obtain and maintain ATO in secure environments.
• Grounded knowledge in NIST SP 800-37, SP 800-53, CNSSI 1253
• XACTA/eMass experience, performing vulnerability compliance with ACAS, STIG automation
• Experience with scripting languages (Bash, Python)
• Understanding of secure software development practices and code reviews
• Experience with encryption and transport
• Understanding of microservices architecture and service mesh.

Preferred Qualifications

• Active TS/SCI with polygraph
• Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS
• Experience supporting the Intelligence Community in RMF activities with ICD 503 and related compliance directives, policies, procedures
• Experience with the Zero Trust pillars and applying Zero Trust framework to secure systems
• DAST & SAST tools for on-prem (Fortify, Checkmarx, SonarQube), configuring Nessus, Splunk
• Multiple IAT/IAM II or III advanced certifications such as, CISSP-ISSAP/ISSEP, CISM, CCSP, Security X/CASP+
• Cloud certifications such as AWS Solutions Architect, AWS Security Specialty, Kubernetes and Cloud Native
• Associate (KCNA), Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)
• Linux certifications such as: Red Hat Certified System Administrator - Enterprise Linux (RHCSA), Red Hat CertifiedEngineer - Enterprise Linux (RHCE), Red Hat Certified Architect - Enterprise Linux (RHCA)
• Prior Linux sys admin experience
• Oracle Linux 8 System Administrator certification
• Experience applying security controls to various AI implementations
• Experience with ICD 503 compliance
• Experience applying security controls to Generative AI implementations
• Prior network engineering experience

-----------------------------------------------------------------------------------------------------------

Who We Are

Sunayu, LLC serves as a premier technology partner to the Defense and Intelligence communities, delivering mission-critical engineering solutions across the nation. Our operations are anchored in a commitment to trust, accountability, and ethical transparency, ensuring the high-performance outcomes necessary to protect our country's most vital interests.

Culture

Our strength lies in our community: Our team prioritizes collaboration, professional growth, and encourages open communication. At Sunayu, we don't just secure the mission—we grow together.

Career Development

We support and encourage our team members to continue their professional growth by providing company-reimbursed training and continuing education of up to $5,000 per year. We also participate in many industry conferences and events where we share our expertise and experiences.

Pay Rate

Salary range considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills, as well as market and business considerations when extending an offer.

Benefits

• 3 Medical Plan Options
• Dental and Vision
• FSA, DCFSA, HSA
• Life/AD&D Insurance
• Short-Term & Long-Term Disability
• Employee Assistance Program (EAP)
• Training and Educational Assistance
• Paid Time Off (PTO)
• 11 Federal holidays
• 401k plan with up to a 6% match (100% immediate vesting)

Equal Opportunity Employer

Sunayu, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran status, disability status, marital status, genetic information, medical condition, or any other characteristic protected by law.