Platform Security Engineer

What you'll do

• Integrate and automate security tools like SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Refine vulnerability detection thresholds and tune scanners to reduce false positives and optimize remediation workflows.
• Harden infrastructure-as-code templates using Terraform and enforce policy-as-code across all environments.
• Conduct risk assessments and contribute to system security plans and continuous ATO efforts.
• Monitor pipeline activity for anomalies and assist in responding to security incidents.
• Champion and drive the adoption of zero trust principles across the software development life cycle.

What we're looking for

• 5+ years of experience in cybersecurity engineering, including DevSecOps in federal or defense environments using IaC/CaC, CI/CD, and SDLC concepts.
• 3+ years of experience in software engineering using Python, Typescript, or Bash and automation frameworks.
• 2+ years of experience implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes.
• Ability to obtain a Secret clearance.
• HS diploma or GED.
• Experience with AI software development, Claude Code, Codex, or Pi.
• Experience using Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
• Experience reviewing code samples and applying whitelisting or exemption processes (preferred).
• Experience developing Zero Trust security solutions for DevSecOps pipelines (preferred).
• Experience evaluating security tools and assessing fit for inclusion in Development or Operational environments (preferred).
• Knowledge of GRC engineering practices, including policy-as-code, automated compliance validation, and risk assessment automation (preferred).
• Possession of excellent verbal, technical writing, and documentation skills (preferred).
• Secret clearance (preferred).
• Bachelor’s degree in Cybersecurity, Computer Science, or a related field (preferred).
• Security+, AWS Solutions Architect, AWS Security, or CISSP Certifications (preferred).