Cybersecurity Engineer

About the Role

Build, enhance, and operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).

Responsibilities

• Implement pipeline blocking rules for Critical/High vulnerabilities and integrate cyber validation tasks into CI/CD
• Perform functional validation of artifacts, delivering validated cyber outputs to Infrastructure TO
• Produce RMF/cATO-ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs)
• Provide direct developer enablement, including onboarding into DSOP tools, secure coding guidance, and mentorship
• Partner with Cloud engineers on early pipeline/environment design and promote secure-by-default automation

Qualifications

• Nine (9) or more years of experience with a Bachelor's degree, or equivalent experience
• Hands-on experience running automated SAST/DAST/container scans using tools like Fortify, ZAP, Grype/Trivy
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools)
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices
• 8140 aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent

Benefits

• Opportunity to work on mission-critical programs with a significant impact on national security
• Collaborate with operators, engineers, and government teams to strengthen mission readiness
• Contribute to shaping how the Air Force sees, decides, and acts across all domains
• Competitive salary range ($160,001 - $200,000) with comprehensive benefits