Job Description
Hello,
\n
\n
We have 4 urgent openings for " Platform Security Engineer ". These are Hybrid roles.
\n
\n
Only looking for candidates who can work on W2
\n
Strictly no C2C or third-party vendors
\n
\n
Title: Platform Security Engineer
\n
Location – McLean, VA
\n
Target Start Date - ASAP
\n
Duration: 6-12 months
\n
\n
Role Overview
\n
Apply your expertise in DevSecOps to integrate and enhance security into our software delivery pipelines. This role is instrumental in fortifying mission-critical systems and ensuring compliance with Department of War (DoW) cybersecurity mandates. You will serve as a technical expert, using secure development practices and delivering continuous improvement across our CI/CD ecosystem.
\n
You will evolve secure CI/CD pipelines by integrating and automating security tools such as SAST, DAST, SCA, and container scanning to meet DoW requirements and reduce operational risk. You will continuously enhance. DevSecOps pipelines by refining vulnerability detection thresholds, tuning scanners, reducing false positives, and optimizing remediation workflows. You will harden infrastructure-as-code (IaC) templates, including Terraform, and enforce policy-as-code across environments. You will conduct risk assessments and contribute to system security plans (SSPs) and continuous ATO efforts.
\n
You’ll collaborate with development, operations, and security teams to support secure software delivery. You’ll
\n
monitor pipeline activity for anomalies and assist in responding to security incidents. You will champion zero trust
\n
principles and drive adoption across the SDLC.
\n
Qualifications
\n
5+ years of experience in cybersecurity engineering, including with DevSecOps in federal or defense environments employing IaC/CaC, CI/CD, and SDLC concepts
\n
3+ years of experience in software engineering using Python, Typescript, or Bash and automation
\n
frameworks
\n
2+ years of experience implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes
\n
Experience with AI software development, Claude Code, Codex, or Pi
\n
Experience using Agile and Change Management methodologies
\n
Knowledge of best practice cybersecurity and threat-based cybersecurity frameworks, including AI/ML security best practices
\n
Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools
\n
Ability to obtain a Secret clearance
\n
HS diploma or GED