Senior DevSecOps Cybersecurity Engineer
New
K
KBRDefense cybersecurity
Source API remote eligibility restrictions: United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of cybersecurity, information assurance, DevSecOps, system security engineering, or related defense experience
- Required Skills
- Kubernetes
Requirements
- Bachelor’s degree in engineering, computer science, information systems, cybersecurity, or a related technical field.
- 7+ years of cybersecurity, information assurance, DevSecOps, system security engineering, or related defense experience.
- Extensive experience implementing and supporting the Risk Management Framework (RMF).
- Strong understanding of NIST 800-53 security controls and DoD cybersecurity policies.
- Demonstrated experience evaluating, explaining, mitigating, and remediating Common Vulnerabilities and Exposures (CVEs).
- Experience supporting software deployments within accredited government production environments.
- Strong understanding of IL5 and IL6 cloud environments and associated cybersecurity requirements.
- Experience supporting ATO and continuous monitoring activities.
- Experience working directly with government cybersecurity organizations and mission stakeholders.
- Ability to communicate technical cybersecurity issues to technical and executive audiences.
- Strong written communication skills for cybersecurity documentation, risk acceptance packages, and authorization artifacts.
- Must be able to obtain and maintain a DoD Secret clearance.
Responsibilities
- Lead cybersecurity engineering for DevSecOps software delivery efforts.
- Provide cybersecurity guidance throughout the software development lifecycle, from design through production deployment.
- Evaluate architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements.
- Assess CVEs, analyze their operational impact and mission risk, and develop mitigation strategies and POA&M recommendations.
- Support RMF activities and implementation and maintenance of NIST 800-53 security controls.
- Develop and maintain cybersecurity artifacts for system authorization and continuous monitoring.
- Support secure software releases into IL5 and IL6 production environments and validate cybersecurity readiness before deployment.
- Participate in cybersecurity assessments, audits, CVI events, incident response activities, and operational readiness events.
- Coordinate with government cybersecurity personnel, ISSMs, ISSOs, Authorizing Officials, mission owners, and engineering teams.
- Communicate cybersecurity risks, mitigation options, and deployment recommendations to leadership and operational stakeholders.
View Full Description & ApplyYou'll be redirected to the employer's site
