Staff Cyber Security Engineer - TS/SCI

Sunayu•Bethesda, MD

1d•Hybrid

About The Position

Sunayu, LLC is hiring a Staff Cyber Security Engineer to support a client in Bethesda, Maryland. Most work is performed on-site, though the schedule is flexible and some tasks may occasionally be performed remotely depending on client requirements and deliverables. The role requires working in a dynamic environment, understanding the software development life cycle, and operating within an Agile framework. The engineer will assess cybersecurity, architecture, and engineering artifacts and Body-of-Evidence results for DoD and Intelligence Community Risk Management Framework authorization processes. Responsibilities include conducting compliance scans, vulnerability assessments, and risk analyses for cloud-based systems; securing containerized applications and cloud infrastructure; integrating security into development workflows, CI/CD pipelines, and engineering tools; and developing scripts and automation for STIG compliance and validation. The engineer will also support continuous monitoring and help government cybersecurity officials and program personnel prepare IATT, ATO, and Change Request packages. Sunayu describes itself as a technology partner to the Defense and Intelligence communities. The company highlights collaboration, professional growth, open communication, and company-reimbursed training and continuing education of up to $5,000 per year, as well as participation in industry conferences and events.

Requirements

Active or current Top Secret clearance with SCI eligibility and the ability to obtain a polygraph.
Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related technical discipline and 8–12 years of relevant experience, or a master's degree and 6–10 years of relevant experience. Additional experience may be considered in lieu of a degree.
ISSO experience must be supplemented with demonstrated technical expertise.
At least one DoD 8570.01-M IAT certification and one IAT Level II or higher certification, such as CCNA Security, CySA+, Security+ CE, or CISSP (or Associate).
Ability to obtain Privileged User Account (PUA) or elevated access under DoD 8570 policy, and Linux+ certification.
At least 5 years of experience hardening Linux hosts and applying DISA STIGs.
Demonstrated experience securing Kubernetes platforms, including secrets management and RBAC, and integrating security into CI/CD pipelines and containers.
Demonstrated experience developing A&A packages to obtain and maintain ATO in secure environments.
Grounded knowledge of NIST SP 800-37, SP 800-53, and CNSSI 1253.
Experience with XACTA/eMASS, ACAS vulnerability compliance, and STIG automation.
Experience with scripting languages such as Bash and Python.
Understanding of secure software development practices and code reviews.
Experience with encryption and transport.
Understanding of microservices architecture and service mesh.

Nice To Haves

Active TS/SCI clearance with polygraph.
Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS.
Experience supporting the Intelligence Community in RMF activities involving ICD 503 and related compliance directives, policies, and procedures.
Experience with the Zero Trust pillars and applying the Zero Trust framework to secure systems.
Experience with on-premises DAST and SAST tools such as Fortify, Checkmarx, and SonarQube, and configuring Nessus and Splunk.
Multiple advanced IAT/IAM II or III certifications, such as CISSP-ISSAP/ISSEP, CISM, CCSP, or Security X/CASP+.
Cloud certifications such as AWS Solutions Architect, AWS Security Specialty, KCNA, CKA, or CKS.
Linux certifications such as RHCSA, RHCE, or RHCA.
Prior Linux system administration experience.
Oracle Linux 8 System Administrator certification.
Experience applying security controls to AI implementations.
Experience with ICD 503 compliance.
Experience applying security controls to Generative AI implementations.
Prior network engineering experience.

Responsibilities

Collect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts.
Collect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence results supporting DoD and Intelligence Community RMF authorization processes.
Conduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems.
Implement and manage security controls for containerized applications and underlying cloud-based infrastructure.
Collaborate with DevSecOps, infrastructure, and software development teams to support secure coding and engineering practices.
Integrate security measures into software development processes, CI/CD pipelines, and engineering tools.
Develop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation.
Implement and manage continuous monitoring solutions for cloud-based architectures.
Support government cybersecurity officials and program personnel in preparing IATT packages, ATO packages, and Change Requests.
Stay current with emerging cloud security threats, technologies, and best practices.

Benefits

Three medical plan options.
Dental and vision coverage.
FSA, DCFSA, and HSA.
Life and AD&D insurance.
Short-term and long-term disability.
Employee Assistance Program (EAP).
Training and educational assistance, including company-reimbursed training and continuing education of up to $5,000 per year.
Paid Time Off (PTO).
11 federal holidays.
401(k) plan with up to a 6% match and 100% immediate vesting.