- Serve as the primary cybersecurity engineering lead supporting DevSecOps software delivery efforts.
- Provide cybersecurity guidance throughout the software development lifecycle from design through production deployment.
- Evaluate system architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements.
- Partner with development, platform, cloud, and infrastructure teams to ensure security is integrated into all phases of delivery.
- Assess Common Vulnerabilities and Exposures (CVEs) identified through automated scanning, security testing, and cybersecurity reviews.
- Analyze operational impact, exploitability, mission risk, and remediation options for vulnerabilities affecting mission systems.
- Develop mitigation strategies and Plans of Action and Milestones (POA&M) recommendations when immediate remediation is not feasible.
- Support Risk Management Framework (RMF) activities across development, test, staging, and production environments.
- Secure software release processes into IL5 and IL6 production environments.
- Support development and maintenance of cybersecurity documentation including Cybersecurity Strategies (CSS), System Security Plans (SSPs), authorization package artifacts, and supporting cybersecurity documentation.
Requirements
- Able to obtain and maintain a DoD Secret clearance
- Bachelor's degree in engineering, computer science, information systems, cybersecurity or related technical field
- 7+ years of cybersecurity, information assurance, DevSecOps, system security engineering, or related defense experience
- Extensive experience implementing and supporting the Risk Management Framework (RMF)
- Strong understanding of NIST 800-53 security controls and DoD cybersecurity policies
- Demonstrated experience evaluating, explaining, mitigating, and remediating Common Vulnerabilities and Exposures (CVEs)
- Experience supporting software deployments within accredited government production environments
- Strong understanding of IL5 and IL6 cloud environments and associated cybersecurity requirements
- Experience supporting ATO and continuous monitoring activities
- Experience working directly with government cybersecurity organizations and mission stakeholders
- Ability to communicate technical cybersecurity issues to both technical and executive audiences
- Strong written communication skills supporting cybersecurity documentation, risk acceptance packages, and authorization artifacts.
Core Competencies
Demonstrates expertise in Cybersecurity Engineering, focusing on DevSecOps practices and compliance with DoD cybersecurity requirements. Proficient in evaluating vulnerabilities, implementing Risk Management Framework (RMF) activities, and developing cybersecurity documentation.
Highest-signal resume keywords
- Cybersecurity Engineering
- Risk Management Framework (RMF)
- Common Vulnerabilities and Exposures (CVEs)
- NIST 800-53 Security Controls
- IL5 and IL6 Cloud Environments
ATS Optimization Keywords Hard Skills
- Cybersecurity
- Information Assurance
- System Security Engineering
- Vulnerability Assessment
- Security Testing
- Mitigation Strategies
- Cybersecurity Documentation
- Software Deployment
- Compliance Evaluation
- Risk Analysis
Soft Skills
- Technical Communication
- Written Communication
Certifications & Qualifications
Industry Keywords
- DevSecOps
- DoD Cybersecurity Policies
- Authorization to Operate (ATO)
- Continuous Monitoring
- Cybersecurity Strategies (CSS)
- System Security Plans (SSPs)
#J-18808-Ljbffr