Cyber Software Engineer

Basic Qualifications

• Proficiency in scripting languages (e.g. Python, Power Shell, Bash) for compliance automation and remediation.
• Experience with vulnerability scanning and frameworks (e.g. OpenSCAP, Nessus, STIGs, CIS Benchmarks).
• Familiarity with CI/CD tools (e.g. Jenkins, Git Lab CI) and security testing integration.
• Experience in Infrastructure as Code (e.g. Terraform and Ansible) and container security.
• Knowledge of Agile/Dev Sec Ops  tools and workflows (e.g. JIRA, Confluence, Git).

Active or ability to obtain a DoD Secret security clearance at the Secret level.

E9752:

Cyber Software Engr

What We’re Doing

We’re advancing the cybersecurity posture of the F-35 Pilot Training Devices (PTD) — critical systems that ensure pilots are prepared for mission success. Our cyber team protects the integrity, availability, and confidentiality of these networked systems, embedding security throughout the Dev Ops lifecycle using the Department of Defense (DoD) Risk Management Framework (RMF).

As a Cyber Software Engineer, you’ll drive secure development and continuous monitoring across PTD systems. You’ll apply automation to compliance and remediation, and champion the integration of cybersecurity into every development phase.

Key Responsibilities:

• Manage system integrity, availability, and cyber compliance for PTD hardware, firmware, and software.
• Maintain and update RMF documentation (e.g. System Security Plan, Plan of Action & Milestones, Security Assessment Report).
• Execute RMF steps — implement, assess, authorize, and monitor security controls.
• Automate compliance checks and remediation using scripting (Python, Power Shell, Bash) and tools such as OpenSCAP, Tenable, and Qualys.
• Integrate security gates into CI/CD pipelines (Jenkins and Git Lab CI) and perform vulnerability testing (SAST and DAST).
• Review Software Bill of Materials (SBOMs) and Software Assurance and Engineering Reports (SAER).
• Utilize Infrastructure as Code (e.g. Terraform, Ansible) to build secure, hardened environments across container platforms (e.g. Docker, Kubernetes).
• Collaborate across systems engineering, test, configuration management, and program management teams to align on security goals.
• Participate in Agile ceremonies and provide technical briefings to leadership and stakeholders.

We’re a multidisciplinary cyber engineering team within the F-35 Pilot Training Devices integrated product team (IPT), uniting experts in software, systems, and security engineering. Our mission is to deliver resilient, compliant, and high-performing systems that support the world’s most advanced fighter training environment. We value innovation, collaboration, and the pursuit of continuous improvement through digital transformation (1

LMX) practices.

You’re a hands-on cybersecurity professional and problem-solver who thrives in Agile environments. You’re passionate about automation, Dev Sec Ops , and integrating security into complex system life cycles. You bring strong technical expertise and a proactive mindset to every challenge.

Join a mission-driven team safeguarding the systems that prepare F-35 pilots for success. You’ll work at the cutting edge of cybersecurity and automation, in an environment that values learning, collaboration, and technical excellence. Your contributions will have real-world impact — protecting critical defense training capabilities and shaping the future of secure Dev Ops within aerospace and defense.

Desired skills

• Experience implementing, assessing, and maintaining RMF processes in accordance with DoD, NIST, or other federal guidelines.
• Knowledge of hypervisors such as VMware vSphere/ESXi, Microsoft Hyper-V, and open-source.
• Hands on proficiency with modern AI/ML platforms (e.g., Tensor Flow, PyTorch, Azure AI, AWS Sage Maker, OpenAI APIs).
• Demonstrated ability to integrate AI solutions into business workflows and conduct model evaluation.

By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should…