Senior DevSecOps Cybersecurity Engineer

Senior Dev Sec Ops  Cybersecurity Engineer

K ’s National Security Solutions team provides high-end engineering and advanced technology solutions to customers in the intelligence and national security communities. This senior cybersecurity practitioner role is embedded within Agile and Dev Sec Ops  development teams, responsible for delivering capabilities into government-owned production environments operating at IL5 and IL6.

Location
:
El Segundo, CA or Colorado Springs, CO (work-from-home flexibility available)

Travel Requirements
:
Minimal

• Cybersecurity Engineering:
  Serve as primary cybersecurity engineering lead supporting Dev Sec Ops  software delivery efforts. Provide guidance throughout the software development lifecycle from design through production deployment. Evaluate system architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements. Partner with development, platform, cloud, and infrastructure teams to ensure security is integrated into all phases of delivery.
• CVE Analysis & Remediation:
  Assess CVEs identified through automated scanning, security testing, and reviews. Analyze operational impact, exploitability, mission risk, and remediation options. Develop mitigation strategies and Plans of Action and Milestones (POA&M) recommendations.
• RMF & Compliance Support:
  Perform RMF activities across development, test, staging, and production environments. Assist with implementation and maintenance of NIST 800-53 controls, develop and maintain cybersecurity artifacts, prepare materials for assessments, authorization reviews, and package updates. Assist with security control assessments and remediation activities.
• Secure Deployment & Operations:
  Support secure software release processes into IL5 and IL6 production environments. Collaborate with Dev Sec Ops  teams to establish compliant deployment methodologies and release procedures. Validate cybersecurity readiness prior to production deployments and major releases.
• Security Documentation & Readiness
  
  Activities:
  
  Support development and maintenance of cybersecurity documentation including Strategies (CSS), System Security Plans (SSPs), authorization package artifacts, and supporting documentation. Participate in vulnerability identification events, assessments, audits, and remediation activities. Support continuity of operations planning, tabletop exercises, incident response activities, and operational readiness events.
• Stakeholder
  
  Collaboration:
  
  Interface directly with government cybersecurity personnel, ISSMs, ISSOs, Authorizing Officials, mission owners, and engineering teams. Communicate cybersecurity risks, mitigation options, and deployment recommendations to leadership and stakeholders. Support Agile ceremonies, release planning events, architecture reviews, and technical working groups.

• Able to obtain and maintain a DoD Secret clearance.
• Bachelor’s degree in engineering, computer science, information systems, cybersecurity or related field.
• 7+ years of experience in cybersecurity, information assurance, Dev Sec Ops , system security engineering, or related defense domains.
• Extensive experience implementing and supporting the Risk Management Framework (RMF).
• Strong understanding of NIST 800-53 controls and DoD cybersecurity policies.
• Demonstrated experience evaluating, explaining, mitigating, and remediating CVEs.
• Experience supporting software deployments within accredited government production environments.
• Strong understanding of IL5 and IL6 cloud environments and associated requirements.
• Experience with ATO and continuous monitoring activities.
• Experience working directly with government cybersecurity organizations and mission stakeholders.
• Ability to communicate technical cybersecurity issues to both technical and executive audiences.
• Strong written communication skills supporting documentation, risk acceptance packages, and authorization artifacts.

• Active DoD Secret clearance or higher.
• Master’s degree in engineering, computer science, information systems, cybersecurity or related field.
• Experience supporting Space Systems Command (SSC), Space Operations Command, U.S. Space Force, or other DoD space organizations.
• Experience supporting operational systems accredited under RMF within classified environments.
• Familiarity with Platform One, Cloud One, Kubernetes, Iron Bank, Big Bang, and related DoD Dev Sec Ops  ecosystems.
• Experience supporting Authority to Operate (ATO) and Continuous Authorization to Operate (cATO) initiatives.
• Knowledge of Secure Software Development Framework (SSDF) and modern Dev Sec Ops  pipelines.
• Experience with STIG implementation, SCAP compliance, ACAS, Nessus, Fortify, Sonar Qube, Snyk, Prisma Cloud, Twistlock, or similar security tooling.
• Security certifications such as CISSP, CASP+, Security+, CISM, CCSP, or GIAC.
• Experience supporting mission-critical systems deployed in classified cloud…