Cyber Security Engineer 4
Backend Developer
Application Security
Cybersecurity Tools
Data Security
DevOps
DevSecOps
Engineer
Facilities Management
Identity and Access Management
Information Security
Information Technology (IT)
InfoSec
Management
Project Management
Risk Governance
Risk Management
Rmf
Security
Security Automation
Security Clearance
Security Compliance
Security Operations
Security Standards
Security Testing
Software Security
Solution Architecture
Job Description
Support secure on-premises systems for DOMEX Technology Platform while integrating security across the full lifecycle and RMF.
Responsibilities
- Support secure architecture, design, and implementation of DoD systems aligned to DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
- Lead RMF integration into the SDLC, including selection, implementation, and validation of security controls.
- Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
- Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
- Maintain scanning infrastructure, analyze vulnerabilities, and support mitigation or risk acceptance decisions.
- Support system authorization, incident response, forensics analysis, and security automation efforts.
Requirements
- Active TS/SCI with ability to obtain a CI Polygraph.
- Bachelor's degree with a minimum of 10 years of experience in the category field.
- At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
- Experience reviewing cybersecurity vulnerabilities for risk and relevance, and building mitigation/remediation plans across systems, network, application, and database vulnerabilities.
- Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable.
- Experience with XACTA, eMASS, or similar tools.
- Strong understanding of Microsoft Windows and Linux/UNIX operating systems.
- Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms.
- Familiarity with NIST 800-171, NIST 800-172, NIST SSDF, CMMC, and CNSSI 1253.
- Experience supporting DoD/IC systems through the RMF+ process.
- Developer experience preferred in at least one scripting or programming language.
Technologies
- DoDI 8510.01, NIST SP 800-53, RMF, SDLC, STIGs, SCAP, STIG Viewer, ACAS
- OWASP, Fortify, SonarQube, Tenable, XACTA, eMASS
- Microsoft Windows, Linux/UNIX, TCP/IP, CI/CD
- NIST 800-171, NIST 800-172, NIST SSDF, CMMC, CNSSI 1253, RMF+
- Python, Java, React, GitLab, Jira, Confluence, OIDC, OAuth2
- Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, Bash, PowerShell
Preferred Qualifications
- Software development experience with Python, Java, or React.
- Experience successfully achieving ATO under RMF+.
- Experience with big data applications.
- Experience with GitLab, Jira, and Confluence.
- Experience in Agile environments.
- Experience with OIDC or OAuth2.
- Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell.
Required Education and Experience Equivalency
- Bachelor's degree with 10 years of experience.
- Master's degree with 10 years of experience.
- PhD with 10 years of experience.
Benefits
- 100% company-paid medical premiums for employees and eligible dependents; choose from CareFirst, Kaiser, and UnitedHealthcare with PPO, POS, HMO, and HSA-compatible plans.
- 100% company-paid dental premiums for employees and eligible dependents.
- 100% company-paid vision premiums for employees and eligible dependents.
- 100% company-paid premiums for short-term disability.
- 100% company-paid premiums for long-term disability.
- 100% company-paid premiums for accidental death & dismemberment (AD&D).
- 100% company-paid premiums for life insurance up to $200,000.
- 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total); pre-tax and Roth options.
- Up to 20 days of flexible paid time off (PTO).
- 11 paid floating holidays.
- Flexible work schedules including flex time and compressed work periods (contract and project-dependent).
- Employee referral bonuses up to $10,000 per hired referral.
Compensation
- Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
- Employee referral bonuses up to $10,000 per hired referral.
- Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
Position Summary
- Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC by designing, developing, and implementing secure systems in on-premises infrastructure and integrating security across the system lifecycle.
Similar Jobs
