Senior AI/Cybersecurity Solutions Engineer
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We must output only HTML fragment, no /, no markdown.
Let's craft.
First, maybe a short paragraph for location and employment type etc. Could be under a heading like "Job Details" but not in allowed headings list. The allowed headings are: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should stick to those. So we need to fit location etc into appropriate sections. Perhaps "About the role" can include company description, location, work arrangement, security requirement. "Responsibilities" from What You'll Do. "Requirements" from Requirements (mandatory). "Qualifications" from Preferred Qualifications. "Skills" maybe we could extract skill keywords but we could also omit if not needed. But we need to prefer few substantive sections over many thin ones. Could combine Skills into Requirements or Qualifications. But we need to follow instruction: Use headings only when posting has real specific content for it. If we don't have distinct Skills section, we can omit it. Similarly Benefits we have. Pay we have. Schedule we have (Full-Time, 100% On-Site). So we will include: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule.
We must not include "Skills" if no specific content beyond what's already covered.
Now craft content.
About the role: include company description (RCG, Inc. is a growing federal contracting company...), location (Suitland, MD), employment type (Full-Time), work arrangement (100% On-Site), security requirement (Must be U.S. Citizen or Lawful Permanent Resident eligible to obtain and maintain a Public Trust). Also maybe mention the role title? Not as heading but can be in prose.
Responsibilities: list from "What You'll Do". We'll need to convert each bullet into
- . The responsibilities are many bullet-like sentences. We'll create
with each sentence as - .
Requirements: list from "Requirements What We're Looking For". Those are bullet points: Bachelor's degree..., 6+ years..., 2+ years..., etc. We'll put each as
- .
Qualifications: list from "Preferred Qualifications". We'll put each as
- .
Benefits: from "Why You'll Love Working Here" and the explicit Benefits list. We'll combine: Work for a company... etc. Also list benefits: Health Care Plan (Medical, Dental & Vision), Retirement Plan (401k, IRA), Life Insurance..., Paid Time Off..., Family Leave..., Short Term & Long Term Disability, Training & Development, Wellness Resources. We'll put as
.
Pay: Salary Range: $130,000 - $140,000. We'll put as .
Schedule: Full-Time, 100% On-Site. We'll put as
.
We must remove boilerplate: Equal Opportunity Employer, Please Note? Actually Please Note contains security requirement which we already included in About the role. We should keep that info but not as separate heading. We'll incorporate it.
We must remove duplicated lines: ensure no duplicate.
Now craft HTML.
We'll start with
About the role
then ...
.
Inside p we can include multiple sentences.
Let's write.
About the role paragraph:
"RCG, Inc. is a growing federal contracting company proudly Certified™ as a Great Place to Work® for four consecutive years, providing innovative technology and cybersecurity solutions supporting complex federal government environments. The position is located in Suitland, MD, is full-time and 100% on-site, and requires the candidate to be a U.S. Citizen or Lawful Permanent Resident eligible to obtain and maintain a Public Trust. RCG is seeking a Senior AI/Cybersecurity Solutions Engineer to support a federal Security, Architecture, and Engineering (SAE) team in Suitland, MD. This is a hands‑on senior engineering role for an experienced professional who combines generative and agentic AI engineering, cloud security, cybersecurity automation, and federal compliance expertise. The selected candidate will help drive an agentic AI security platform, develop and harden automation supporting NIST 800‑53 security assessments and remediation workflows, and take ownership of technical workstreams from requirements and implementation through CI/CD, deployment, and evidence generation."
That seems good.
Now Responsibilities heading Responsibilities
then with each duty.
We need to extract each duty from "What You'll Do". Let's list them:
- Design and implement Amazon Bedrock agent action groups, including OpenAPI schemas and Python Lambda execution layers.
- Develop Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases with sources such as NIST 800-53, CIS Benchmarks, organizational System Security Plans (SSPs), and threat intelligence.
- Engineer prompts, guardrails, and input validation to improve AI accuracy, security, and resistance to prompt-injection attacks.
- Evaluate and evolve foundation-model strategies as AI capabilities and platform requirements mature.
- Develop AI-assisted capabilities supporting security assessment, remediation, hardening, alert triage, and compliance workflows.
- Build automated NIST 800-53 control assessments and security evidence collection capabilities.
- Develop remediation and hardening automation across AWS services, including S3, EC2, IAM, CloudTrail, ECS, and EKS.
- Integrate live data from AWS Security Hub, GuardDuty, Inspector, and Config to support environment-aware security analysis and AI-assisted decision-making.
- Support BOD 26-04 SLA logic, CISA KEV correlation, risk enrichment, and remediation SLA tracking.
- Support security telemetry aggregation and integration with SIEM technologies, including Microsoft Sentinel and AWS Security Lake.
- Support ECR vulnerability scanning, EKS runtime monitoring, and container configuration hardening.
- Develop and analyze Software Bills of Materials (SBOMs) using formats such as SPDX and CycloneDX.
- Correlate vulnerabilities with the CISA Known Exploited Vulnerabilities (KEV) catalog to support risk-based prioritization.
- Perform dependency, provenance, and software supply-chain security checks, including detection of typosquatting and unsigned container images.
- Maintain GitLab CI/CD pipelines supporting linting, testing, security scanning, builds, and deployments.
- Implement secure OIDC-based AWS authentication.
- Develop and manage Infrastructure as Code using CloudFormation and/or Terraform with least-privilege IAM.
- Support deployment and rollout verification across application and Kubernetes/EKS environments.
- Maintain strong Git practices, including branching, merge requests, and clean version-control history.
- Manage engineering work through Jira, maintaining accurate tickets, epics, sub-tasks, workflows, status, and handoffs.
- Maintain Confluence documentation, including architecture guides, runbooks, decision records, and onboarding materials.
- Produce technical design documentation, evidence packages, and other artifacts capable of supporting federal security assessments and audits.
- Maintain traceability between requirements, engineering work, code, deployments, and security evidence.
- Take primary ownership of assigned technical workstreams and collaborate closely with cybersecurity and engineering team members.
That's many. We'll put each as - .
Now Requirements heading
Requirements
with each:
- Bachelor's degree in computer science, Cybersecurity, or a related technical discipline.
- 6+ years of cloud security engineering experience.
- 2+ years of production experience with generative AI/LLM technologies.
- 4+ years of experience working with AWS security services.
- 3+ years of experience supporting federal compliance frameworks such as NIST, FedRAMP, and FISMA.
- 2+ years of active Jira and Confluence experience in an Agile or technical delivery environment.
- Expert-level Python development experience, including Python 3.11+, boto3, type hints, and robust error handling.
- Advanced experience with Amazon Bedrock, including agents, action groups, Knowledge Bases, guardrails, prompt engineering, and RAG.
- Expert knowledge of AWS security technologies, including Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, and OIDC.
- Advanced container security experience with ECR, ECS/EKS, image scanning, runtime monitoring, and hardening.
- Expert knowledge of NIST SP 800-53 Rev. 5, including control families, assessment procedures, and evidence requirements.
- Advanced experience with CI/CD and Infrastructure as Code technologies, including GitLab CI and CloudFormation and/or Terraform.
- Advanced Git/version-control experience.
- Demonstrated experience managing technical work in Jira and maintaining team documentation in Confluence.
Now Qualifications heading Qualifications
with preferred qualifications:
- Master's degree in a related technical discipline.
- 3+ years of experience building production AI agents.
- Experience supporting ATO and continuous monitoring activities.
- Experience administering or configuring Jira boards and Confluence spaces.
- Experience supporting federal IT security programs.
- Familiarity with CISA Binding Operational Directives, including BOD 22-01 and BOD 26-04.
- Experience with AWS Security Lake, OCSF, OSCAL machine-readable compliance, or Microsoft Sentinel integration.
- Experience with AI red teaming or adversarial testing of LLM applications.
- Familiarity with software supply-chain technologies and frameworks such as SLSA, Sigstore, and in-toto.
- Certifications such as AWS Certified Security - Specialty, CISSP, CISM, CKS, or AWS machine learning certification are preferred.
Now Benefits heading Benefits
maybe combine prose and list. We'll have a
for the descriptive sentences: "Work for a company proudly Certified™ as a Great Place to Work® for four consecutive years. Support mission-focused federal cybersecurity and technology initiatives. Work directly with emerging generative AI and agentic AI technologies. Solve complex challenges involving AI, cybersecurity, cloud security, automation, and federal compliance. Work with modern AWS security, container, DevSecOps, and Infrastructure as Code technologies. Opportunities for continued technical and professional development." Then a
for benefits list:
- Health Care Plan (Medical, Dental & Vision)
- Retirement Plan (
for prose. We must output only HTML fragment, no /, no markdown. Let's craft. First, maybe a short paragraph for location and employment type etc. Could be under a heading like "Job Details" but not in allowed headings list. The allowed headings are: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should stick to those. So we need to fit location etc into appropriate sections. Perhaps "About the role" can include company description, location, work arrangement, security requirement. "Responsibilities" from What You'll Do. "Requirements" from Requirements (mandatory). "Qualifications" from Preferred Qualifications. "Skills" maybe we could extract skill keywords but we could also omit if not needed. But we need to prefer few substantive sections over many thin ones. Could combine Skills into Requirements or Qualifications. But we need to follow instruction: Use headings only when posting has real specific content for it. If we don't have distinct Skills section, we can omit it. Similarly Benefits we have. Pay we have. Schedule we have (Full-Time, 100% On-Site). So we will include: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule. We must not include "Skills" if no specific content beyond what's already covered. Now craft content. About the role: include company description (RCG, Inc. is a growing federal contracting company...), location (Suitland, MD), employment type (Full-Time), work arrangement (100% On-Site), security requirement (Must be U.S. Citizen or Lawful Permanent Resident eligible to obtain and maintain a Public Trust). Also maybe mention the role title? Not as heading but can be in prose. Responsibilities: list from "What You'll Do". We'll need to convert each bullet into
- with each sentence as
- . Requirements: list from "Requirements What We're Looking For". Those are bullet points: Bachelor's degree..., 6+ years..., 2+ years..., etc. We'll put each as
- . Qualifications: list from "Preferred Qualifications". We'll put each as
- .
Benefits: from "Why You'll Love Working Here" and the explicit Benefits list. We'll combine: Work for a company... etc. Also list benefits: Health Care Plan (Medical, Dental & Vision), Retirement Plan (401k, IRA), Life Insurance..., Paid Time Off..., Family Leave..., Short Term & Long Term Disability, Training & Development, Wellness Resources. We'll put as
- .
Pay: Salary Range: $130,000 - $140,000. We'll put as
- .
Now Requirements heading
Requirements
- with each:
- Bachelor's degree in computer science, Cybersecurity, or a related technical discipline.
- 6+ years of cloud security engineering experience.
- 2+ years of production experience with generative AI/LLM technologies.
- 4+ years of experience working with AWS security services.
- 3+ years of experience supporting federal compliance frameworks such as NIST, FedRAMP, and FISMA.
- 2+ years of active Jira and Confluence experience in an Agile or technical delivery environment.
- Expert-level Python development experience, including Python 3.11+, boto3, type hints, and robust error handling.
- Advanced experience with Amazon Bedrock, including agents, action groups, Knowledge Bases, guardrails, prompt engineering, and RAG.
- Expert knowledge of AWS security technologies, including Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, and OIDC.
- Advanced container security experience with ECR, ECS/EKS, image scanning, runtime monitoring, and hardening.
- Expert knowledge of NIST SP 800-53 Rev. 5, including control families, assessment procedures, and evidence requirements.
- Advanced experience with CI/CD and Infrastructure as Code technologies, including GitLab CI and CloudFormation and/or Terraform.
- Advanced Git/version-control experience.
- Demonstrated experience managing technical work in Jira and maintaining team documentation in Confluence.
Now Qualifications heading
Qualifications
- with preferred qualifications:
- Master's degree in a related technical discipline.
- 3+ years of experience building production AI agents.
- Experience supporting ATO and continuous monitoring activities.
- Experience administering or configuring Jira boards and Confluence spaces.
- Experience supporting federal IT security programs.
- Familiarity with CISA Binding Operational Directives, including BOD 22-01 and BOD 26-04.
- Experience with AWS Security Lake, OCSF, OSCAL machine-readable compliance, or Microsoft Sentinel integration.
- Experience with AI red teaming or adversarial testing of LLM applications.
- Familiarity with software supply-chain technologies and frameworks such as SLSA, Sigstore, and in-toto.
- Certifications such as AWS Certified Security - Specialty, CISSP, CISM, CKS, or AWS machine learning certification are preferred.
Now Benefits heading
Benefits
maybe combine prose and list. We'll have a
for the descriptive sentences: "Work for a company proudly Certified™ as a Great Place to Work® for four consecutive years. Support mission-focused federal cybersecurity and technology initiatives. Work directly with emerging generative AI and agentic AI technologies. Solve complex challenges involving AI, cybersecurity, cloud security, automation, and federal compliance. Work with modern AWS security, container, DevSecOps, and Infrastructure as Code technologies. Opportunities for continued technical and professional development." Then a
- for benefits list:
- Health Care Plan (Medical, Dental & Vision)
- Retirement Plan (
. Schedule: Full-Time, 100% On-Site. We'll put as
. We must remove boilerplate: Equal Opportunity Employer, Please Note? Actually Please Note contains security requirement which we already included in About the role. We should keep that info but not as separate heading. We'll incorporate it. We must remove duplicated lines: ensure no duplicate. Now craft HTML. We'll start with
About the role
then...
. Inside p we can include multiple sentences. Let's write. About the role paragraph: "RCG, Inc. is a growing federal contracting company proudly Certified™ as a Great Place to Work® for four consecutive years, providing innovative technology and cybersecurity solutions supporting complex federal government environments. The position is located in Suitland, MD, is full-time and 100% on-site, and requires the candidate to be a U.S. Citizen or Lawful Permanent Resident eligible to obtain and maintain a Public Trust. RCG is seeking a Senior AI/Cybersecurity Solutions Engineer to support a federal Security, Architecture, and Engineering (SAE) team in Suitland, MD. This is a hands‑on senior engineering role for an experienced professional who combines generative and agentic AI engineering, cloud security, cybersecurity automation, and federal compliance expertise. The selected candidate will help drive an agentic AI security platform, develop and harden automation supporting NIST 800‑53 security assessments and remediation workflows, and take ownership of technical workstreams from requirements and implementation through CI/CD, deployment, and evidence generation." That seems good. Now Responsibilities headingResponsibilities
then- with each duty.
We need to extract each duty from "What You'll Do". Let's list them:
- Design and implement Amazon Bedrock agent action groups, including OpenAPI schemas and Python Lambda execution layers.
- Develop Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases with sources such as NIST 800-53, CIS Benchmarks, organizational System Security Plans (SSPs), and threat intelligence.
- Engineer prompts, guardrails, and input validation to improve AI accuracy, security, and resistance to prompt-injection attacks.
- Evaluate and evolve foundation-model strategies as AI capabilities and platform requirements mature.
- Develop AI-assisted capabilities supporting security assessment, remediation, hardening, alert triage, and compliance workflows.
- Build automated NIST 800-53 control assessments and security evidence collection capabilities.
- Develop remediation and hardening automation across AWS services, including S3, EC2, IAM, CloudTrail, ECS, and EKS.
- Integrate live data from AWS Security Hub, GuardDuty, Inspector, and Config to support environment-aware security analysis and AI-assisted decision-making.
- Support BOD 26-04 SLA logic, CISA KEV correlation, risk enrichment, and remediation SLA tracking.
- Support security telemetry aggregation and integration with SIEM technologies, including Microsoft Sentinel and AWS Security Lake.
- Support ECR vulnerability scanning, EKS runtime monitoring, and container configuration hardening.
- Develop and analyze Software Bills of Materials (SBOMs) using formats such as SPDX and CycloneDX.
- Correlate vulnerabilities with the CISA Known Exploited Vulnerabilities (KEV) catalog to support risk-based prioritization.
- Perform dependency, provenance, and software supply-chain security checks, including detection of typosquatting and unsigned container images.
- Maintain GitLab CI/CD pipelines supporting linting, testing, security scanning, builds, and deployments.
- Implement secure OIDC-based AWS authentication.
- Develop and manage Infrastructure as Code using CloudFormation and/or Terraform with least-privilege IAM.
- Support deployment and rollout verification across application and Kubernetes/EKS environments.
- Maintain strong Git practices, including branching, merge requests, and clean version-control history.
- Manage engineering work through Jira, maintaining accurate tickets, epics, sub-tasks, workflows, status, and handoffs.
- Maintain Confluence documentation, including architecture guides, runbooks, decision records, and onboarding materials.
- Produce technical design documentation, evidence packages, and other artifacts capable of supporting federal security assessments and audits.
- Maintain traceability between requirements, engineering work, code, deployments, and security evidence.
- Take primary ownership of assigned technical workstreams and collaborate closely with cybersecurity and engineering team members.
That's many. We'll put each as
- .
Now Requirements heading