Assist in the development and security hardening of a DevSecOps cloud environment.
Support the full lifecycle of Assessment and Authorization (A&A) activities.
Maintain continuous Authority to Operate (ATO) compliance.
Develop, implement, and enforce cybersecurity policies.
Monitor control inheritance and system boundary changes.
Conduct risk assessments and guide engineering team to align configurations with RMF controls.
Serve as the primary liaison to government stakeholders and cross-functional teams.
Facilitate security briefings and coordinate remediation activities.

Must be a US Citizen
Ability to obtain and maintain a Secret security clearance
Bachelor’s degree in cybersecurity, computer science, engineering, or related field (or equivalent experience).
3+ years of cybersecurity engineering experience supporting DoD, federal, or regulated environments – eMASS experience is a requirement.
Hands-on experience with Azure security tools, including Microsoft Defender suite, Sentinel, Purview, and Azure Policy.
Strong knowledge of FedRAMP requirements and implementations.
Deep understanding of DoD RMF, NIST SP 800-53 Rev. 5 controls, and security assessment/evidence requirements.
Experience implementing CMMC 2.0 or NIST SP 800-171 controls, including documentation, continuous monitoring, and audit readiness.
Proficiency in vulnerability management tools, remediation processes, and risk-based prioritization.
Familiarity with threat intelligence platforms, adversary TTP analysis, and building threat-informed security detections.

Cybersecurity Engineer

Key skills