Senior DevSecOps Cybersecurity Engineer

ENSCO, Inc is a diverse engineering and technology company that provides engineering, science and advanced technology solutions that guarantee mission success, safety, and security to governments and private industries worldwide.

ENSCO is seeking a Senior DevSecOps Cybersecurity Engineer to join our team in Colorado Springs, CO or El Segundo, CA. This role serves as a senior cybersecurity and RMF expert embedded within Agile and DevSecOps development teams responsible for delivering capabilities into government-owned production environments operating at IL5 and IL6. The emphasis is on CVE analysis and remediation, RMF execution, cybersecurity documentation, deployment approval activities, security compliance, and effective communication of cyber risk to government stakeholders while enabling rapid and secure mission capability delivery.

The Cybersecurity Engineer will work closely with software developers, cloud engineers, mission owners, systems engineers, Information System Security Managers (ISSMs), Authorizing Officials (AOs), and government cybersecurity personnel to ensure software releases meet security, compliance, and operational requirements.

The position requires deep expertise in RMF implementation, vulnerability management, CVE assessment and remediation, secure deployment methodologies, and cybersecurity activities necessary to support Authority to Operate (ATO) accredited environments.

The candidate must be capable of explaining cybersecurity risk to both technical and non-technical stakeholders, developing mitigation strategies for identified vulnerabilities, and ensuring mission capabilities can be rapidly and securely deployed into operational environments.

The MILSATCOM Systems Engineering, Integration, and Test (MSEIT) effort provides leading edge Systems Engineering & Integration (SE&I) for the Air Force's Space and Missiles System Center. We support the Air Force's acquisition of state of the art Military Satellite Communications systems, providing global secure, survivable, and protected communications for our nation's warfighters. We seek technical individuals who will thrive in a highly collaborative work environment of small teams, using the most modern tools and methodologies to tackle the challenges of integrating complex space and ground communications systems. This position is on-site in Colorado Springs, CO or El Segundo, CA. Some of the job responsibilities include but are not limited to:

Cybersecurity Engineering
• Serve as the primary cybersecurity engineering lead supporting DevSecOps software delivery efforts.
• Provide cybersecurity guidance throughout the software development lifecycle from design through production deployment.
• Evaluate system architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements.
• Partner with development, platform, cloud, and infrastructure teams to ensure security is integrated into all phases of delivery.

CVE Analysis & Remediation
• Assess Common Vulnerabilities and Exposures (CVEs) identified through automated scanning, security testing, and cybersecurity reviews.
• Analyze operational impact, exploitability, mission risk, and remediation options for vulnerabilities affecting mission systems.
• Develop mitigation strategies and Plans of Action and Milestones (POA&M) recommendations when immediate remediation is not feasible.
• Provide technical justification and risk-based explanations to government stakeholders regarding vulnerability disposition decisions.
• Support vulnerability review boards and release decisions for software entering production environments.

RMF & Compliance
• Support Risk Management Framework (RMF) activities across development, test, staging, and production environments.
• Assist with implementation and maintenance of NIST 800-53 security controls.
• Develop and maintain cybersecurity artifacts required to support system authorization and continuous monitoring activities.
• Prepare material supporting cybersecurity assessments, authorization reviews, and package updates.
• Assist with security control assessments and remediation activities associated with authorization findings.

Secure Deployment & Operations
• Support secure software release processes into IL5 and IL6 production environments.
• Collaborate with DevSecOps teams to establish compliant deployment methodologies and release procedures.
• Validate cybersecurity readiness prior to production deployments and major software releases.
• Review security impacts of infrastructure, software, and configuration changes.
• Ensure application, container, platform, and infrastructure security requirements are met prior to deployment.

Security Documentation & Readiness Activities
• Support development and maintenance of cybersecurity documentation including Cybersecurity Strategies (CSS), System Security Plans (SSPs), authorization package artifacts, and supporting cybersecurity documentation.
• Participate in Cyber Vulnerability Identification (CVI) events, cybersecurity assessments, security audits, and remediation activities.
• Support Continuity of Operations (COOP) planning, tabletop exercises, incident response activities, and operational readiness events.
• Assist mission teams in preparing for cybersecurity inspections, compliance reviews, and authorization activities.
• Coordinate with government cybersecurity organizations to ensure documentation remains current and audit-ready.

Stakeholder Collaboration
• Interface directly with government cybersecurity personnel, ISSMs, ISSOs, Authorizing Officials, mission owners, and engineering teams.
• Communicate cybersecurity risks, mitigation options, and deployment recommendations to leadership and operational stakeholders.
• Support Agile ceremonies, release planning events, architecture reviews, and technical working groups.
• Provide cybersecurity guidance to software teams on secure coding, vulnerability remediation, and release readiness.