Staff / Sr Staff Cybersecurity Engineer

SciTec, Inc.; Fairborn (OH); On-site; USD 87,000 - 130,000; Full time

Benefits offered by this job

100% company paid HSA Medical insurance

80% company paid Dental insurance

Generous Paid Time Off

Job summary

A dynamic small business is seeking experienced Staff and Senior Staff Cybersecurity Engineers to ensure compliance with government security policies. Responsibilities include managing CI/CD security, implementing NIST RMF policies, and ensuring AWS security. Candidates must have a relevant Bachelor's degree, at least two years of experience with CI/CD, and the ability to obtain a DoD security clearance. This full-time position is located in Fairborn, Ohio, offering a salary range of $87,000 - $130,000 per year, along with attractive benefits including 100% company paid health insurance.

Qualifications

• At least two years of professional experience building and executing CI/CD solutions.
• Demonstrated experience in NIST RMF, CMMC, and STIG compliance.
• Knowledge of different types of software licenses.

Responsibilities

• Stay up to date with NIST RMF revisions and develop policy documents.
• Document and implement security of CI pipelines using GitLab CI/CD.
• Manage AWS (GovCloud) security for software artifacts.

Skills

DevOps or DevSecOps solutions using CI/CD

NIST RMF compliance

Security best practices for containerized solutions

Good verbal and written communication skills

Education

Bachelor's degree in cybersecurity, computer science, engineering, mathematics, or physical sciences

Tools

JFrog Artifactory

SonarQube

Docker

Kubernetes

Job description

SciTec, Inc. is a dynamic small business with the mission to deliver advanced sensor data processing technologies and scientific instrumentation capabilities in support of National Security and Defense. SciTec supports customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique world-class data exploitation capabilities.

Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. SciTec cannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered.

SciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.

Responsibilities

• Stay up to date with latest revisions of NIST RMF revisions and develop/update policy documents as needed
• Document and implement security of the Continuous Integration (CI) pipelines in GitLab CI/CD using JFrog Artifactory, SonarQube, and Ansible
• Develop threat models and other required documentation that describe end-to-end security of the SDLC
• Manage integration, security scanning, and deployment security of multiple applications into orchestrated frameworks
• Ensure software promotions comply with government security policies at all classification levels
• Manage AWS (GovCloud) security to maintain integrity of software artifacts
• Other duties as assigned

Requirements

• Bachelor's degree in cybersecurity, computer science, engineering, mathematics, or physical sciences
• At least two years of professional experience building and executing DevOps or DevSecOps solutions using Continuous Integration / Continuous Deployment (CI/CD)
• Demonstrated experience in NIST RMF, CMMC, and STIG compliance
• Demonstrated experience in applying security best practices to containerized solutions and orchestration frameworks such as Docker, Podman, Kubernetes, etc.
• Demonstrated cybersecurity protocols are followed in development, test and production environments
• Knowledge of different types of software licenses (Public Domain, LGPL, Permissive, Copy Left, Proprietary)
• The ability to obtain and maintain a DoD security clearance
• Ability to work 100% on-site
• Detail oriented
• Good verbal and written communication skills

Preferred Skills

• Demonstrated experience with static and dynamic analysis tools
• Demonstrated experience with software package artifact management using JFrog Artifactory, Nexus or similar
• Experience with software vulnerability assessment and remediation using SAST/DAST and tools like SonarQube
• Experience with Python3 or C++
• Experience with container security tools such as Grype, Syft, Snyk, etc.
• Systems and service administration in a Linux environment, including the installation and maintenance of applications supporting CI/CD like Gitlab, etc
• Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment

Benefits

• 3% Fully Vested Company 401K Contribution (no employee contribution required)
• 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
• 80% company paid Dental insurance
• 100% company paid Vision insurance
• 100% company paid Life insurance
• 100% company paid Long-term Disability insurance
• Short-term Disability insurance
• Annual Profit-Sharing Plan
• Discretionary Performance Bonus
• Paid Parental Leave
• Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
• Flexible work hours

The pay range for this position is $87,000 - $130,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.

SciTec is proud to be an Equal Opportunity employer. VET/Disabled.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job Function

• Information Technology

Industry

• Defense and Space Manufacturing