Cybersecurity Engineer

Target salary range: $120k - $145k. The estimate displayed represents the typical salary range for this position based on experience and other factors.

We are seeking a Cloud Cybersecurity Engineer to lead security policy, compliance, and information assurance for our enterprise-level cloud applications. In this role, you will champion a modern DevSecOps approach to streamline Risk Management Framework (RMF) processes, partner with senior government stakeholders, and guide cross-functional teams through the full Authorization to Operate (ATO) lifecycle within Department of Defense (DoD) environments.

• Education & Experience: Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical discipline, paired with at least 8 years of direct experience in cybersecurity engineering or information assurance.
• ATO & RMF Expertise: Proven experience navigating the complete ATO lifecycle from initial system registration to final authorization.
• Tooling Proficiency: Direct, hands-on experience using eMASS to manage RMF workflows, controls, and compliance artifacts.
• DoD Framework Mastery: Expert knowledge of DoD information security policies, practices, and legal requirements, including DoDI 8510.01, DISA STIGs, and FedRAMP.
• NIST 800-53 Rev. 5 Knowledge: In-depth understanding of NIST 800-53r5 controls, with the ability to review, analyze, and evaluate system configurations and cloud architectures to identify critical dependencies and security risks.
• DoD 8570 Certification: Must meet IAT Level II requirements as specified in DoD 8570.01-M (e.g., Security+ CE, CySA+, GSEC, CCNA Security).

• →Strategic Oversight: Provide overall direction and guidance for cybersecurity policy, strategy, and compliance across multiple enterprise cloud applications.
• →Security Documentation & Accreditation: Develop and deliver system security and information assurance documentation compliant with federal standards to achieve system certification and accreditation.
• →DevSecOps Integration: Advocate for and implement a modern DevSecOps approach to security testing and control implementation, aligned with NIST SP 800-53 Rev. 5.
• →Policy Innovation: Devise policy recommendations that streamline and accelerate successful security outcomes and ATO timelines.
• →Architectural Guidance: Provide hands-on guidance and oversight for platform- and application-level security controls and risk mitigation strategies.
• →Stakeholder Engagement: Interact directly with senior policy directors at the Department and Service levels to align technical execution with overarching mission objectives.