Cybersecurity Engineer

Job Description

Aspis is expanding its cybersecurity team and seeking a hands-on Cybersecurity Engineer to build the security capability behind a large Federal civilian cloud platform operations and maintenance program. This is a building role rather than a monitoring role. The environment is hybrid: a FedRAMP-authorized AWS commercial cloud footprint alongside Azure, on-premises data centers, legacy and mainframe-connected applications, and enterprise geospatial platforms supporting hundreds of business applications.

You will write and maintain the automation, pipeline security stages, hardened baselines, detection content, and integrations that make security continuous instead of manual. Responsibilities align to the NIST NICE Workforce Framework for Cybersecurity (NIST SP 800-181r1). You will work alongside cloud engineers, Dev Sec Ops  engineers, and our compliance and authorization staff, with real ownership on a small, senior team.

This is a full-time position. The Kansas City, Missouri metropolitan area is strongly preferred and candidates who reside in and can work from the Kansas City metro will receive preference; however, residency there is not required, and we will consider candidates elsewhere in the United States who are able to travel to client sites as needed. Consistent with Aspis' telework policy, employees are required to report to an Aspis office on a regular basis but may be allowed to work from home and are required to visit client job sites as applicable.

The company reserves the right to change its employment policies at any time without notice.

Responsibilities

• Design, code, test, and maintain security automation - scripts, modules, services, and integrations - that replace manual security work.
• Build and maintain infrastructure-as-code modules that deliver hardened, compliant cloud resources by default.
• Build and maintain security stages in CI/CD pipelines, including static analysis, dependency and container image scanning, secrets detection, and policy-as-code gates.
• Engineer hardened operating system, container, and cloud service baselines, plus the automation that applies and enforces them.
• Build identity, access, encryption, key management, and logging capability into the platform, and engineer secure interfaces between on-premises systems and cloud services.
• Build and maintain detection content, correlation rules, and alerting as code, with version control and testing.
• Automate vulnerability scanning coverage, finding enrichment, deduplication, ticket creation, and aging escalation so remediation service levels are met without manual tracking.
• Build response automation and playbooks-as-code for containment, isolation, evidence capture, and recovery, and participate in the on-call rotation.
• Convert incident findings and root cause analysis into durable engineering fixes rather than repeat manual response.
• Maintain design documentation, run books, reference architectures, and code documentation, and provide control implementation evidence to compliance and authorization staff.
• Mentor junior engineers, perform code review, and support knowledge transfer to client staff.
• Other duties as assigned.

Qualifications

• Demonstrated ability to build and maintain production code or automation in at least one language such as Python, Bash, Power Shell, or Go, with source control, testing, and peer review discipline.
• Hands-on cloud security engineering experience in AWS, with working knowledge of Azure, appropriate to experience level.
• Experience building CI/CD pipeline security stages using Git Lab or comparable tooling, and infrastructure-as-code proficiency such as Terraform or Cloud Formation.
• Working knowledge of hardening standards and of security frameworks relevant to Federal work (NIST SP 800-53, FISMA, FedRAMP), appropriate to experience level.
• Experience building or tuning vulnerability scanning coverage, detection content, or log pipelines.
• Strong analytical skills and attention to detail.
• Clear, professional written and verbal communication, including design and operational documentation.
• Ability to manage multiple assignments and deadlines with limited day-to-day oversight.
• Discretion…