Cybersecurity Engineer - Clearance Required

Cydecor, Inc•Norfolk, VA

2d•$120,000 - $145,000•Onsite

About The Position

Cydecor is seeking a Cybersecurity Engineer to focus on the security aspects of software delivery for a large Navy readiness reporting program. This is a hands-on engineering role where you will collaborate closely with development teams to identify vulnerabilities early, drive fixes into the code and pipeline, and integrate security into the software design, build, test, and deployment processes. You will be responsible for running and tuning security testing, tracking findings to closure, and maintaining the security of the codebase and its dependencies. The role requires a strong understanding of the Risk Management Framework (RMF) to align with the program's security posture, reporting to the Cybersecurity Lead Engineer who manages the ATO packages.

Requirements

5+ years in cybersecurity engineering, with a focus on the software development life cycle and vulnerability management.
Demonstrated experience with security testing in CI/CD pipelines using tools like SonarQube, Fortify, Checkmarx, or Snyk in Azure DevOps or comparable platforms.
Comfortable with vulnerability scanning and remediation: STIG application (focused expertise regarding Application Security Development), scan analysis (ACAS/Nessus or equivalent), secure code review, and dependency/patch management.
Working knowledge of RMF for DoD systems.
IAM Level II Information Assurance Certification (per DoDI 8570.01-M and SECNAV M-5239.2), or equivalent under DoDM 8140.03 at Basic or Intermediate proficiency.
Interim or Active DOD Secret Security Clearance.
Bachelor’s degree in computer science, cybersecurity, engineering, or a related technical field. Additional relevant experience can substitute for the degree.

Nice To Haves

CSSLP, GWAPT, GWEB, CySA+, or similar secure-coding/vulnerability credentials
CISSP
Prior work on DoD or Navy software programs
Experience with cloud-hosted workloads and container security

Responsibilities

Run security testing across the development pipeline, including SAST, DAST, software composition analysis, and container/image scanning, ensuring effective tuning to identify critical issues.
Triage and prioritize security findings, differentiate actionable issues from false positives or low-risk items, and collaborate with developers on remediation within the code and CI/CD pipeline, tracking findings to resolution.
Review code and dependencies for security vulnerabilities and provide developers with clear, actionable remediation guidance.
Apply STIGs and hardening baselines, manage vulnerability response and patching cadence, and ensure the codebase and its dependencies are kept current.
Enforce secure change management processes by conducting Security Impact Analyses for proposed changes to authorized Navy systems.
Review DoW and Navy Cyber Tasking Orders and other Cyber Directives for applicability to the NRRE family of systems and coordinate with stakeholders for compliance.
Ensure cybersecurity activities align with the program's Risk Management Framework (RMF) posture and provide necessary documentation, evidence, and technical inputs to the Cybersecurity Lead Engineer for accreditation and continuous monitoring.
Stay current on DoD cybersecurity guidance, tools, technologies, and best practices, integrating relevant updates into team and program activities.
Effectively communicate cybersecurity posture, risks, and recommendations to both technical and non-technical stakeholders.
Establish and contribute to team standards, best practices, and reusable solutions to improve efficiency and consistency.
Take ownership of issues and gaps, proactively driving solutions and coordinating with stakeholders for effective resolution.