Cybersecurity Engineer

Raft Company Website•Langley, MA

7d•Onsite

About The Position

The Cyber Security Engineer shall have cyber security engineering experience building and securing applications at an Individual Contributor Level, understand all phases of application and service release lifecycle as part of the DevSecOps methodology. A successful candidate knows one or more modern programming languages, has a cyber security background on the cloud, understands computer science fundamentals either through education or experience, and has worked as part of an Agile team to deliver enterprise software solutions across an organization. The candidate shall utilize DevSecOps methodology to successfully secure Platform features/capabilities that are deployed onto a Hybrid infrastructure consisting of onprem and commercial cloud environments.

Requirements

5+ years of experience with Terraform, SIEM, AWS.
5+ years of experience in managing multiple AWS environments (VPCs, firewalls, IAM, GuardDuty, Cloud Trail, WAF).
5+ years of experience leading teams building and developing containerized services deployed in production on orchestration platforms such as Kubernetes, Mesos, etc.
5+ years of experience as an administrator and maintainer of Kubernetes clusters, including upgrading, troubleshooting, and deploying applications via GitOps (such as Flux, ArgoCD, or Fleet).
3+ years of experience in Identity and Access Lifecycle Management Operations and Controls using tools like Okta or Keycloak.
Deep understanding of modern microservices architectures, design patterns, resiliency techniques, and optimizations.
3+ years' experience with modern programming languages such as Java, Python, or Go
Experience managing infrastructure and developed APIs/platform services for tenants to use container services
Linux experience
Experience with at least one agile methodology, including Scrum or Kanban
Obtain Security+ within the first 90 days of employment with Raft
Bachelor Degree in computer science, Mathematics, or equivalent technical degree; or equivalent industry experience
Must be able to obtain and maintain an Active Secret security clearance
U.S. citizenship

Nice To Haves

3+ years of experience in automated security tooling such as SCA, SAST, DAST, IAST such as Snyk, Checkmarx, GitLab / AWS Security
Knowledge of NIST RMF and ATO process within the DoD or other highly regulated environments following similar compliance frameworks & security requirements.

Responsibilities

Manage, report, and facilitate certification of access for all in-scope resources (including SaaS, AWS, Azure, CSS managed applications, tools, and systems).
Work closely with the client and other key stakeholders to provide strategic input and help navigate needs and tradeoffs to build extensible digital solutions