Platform Security Engineer

Platform Security Engineer position in McLean, VA applying DevSecOps to secure software delivery across CI/CD, infrastructure-as-code, and compliance activities.

Responsibilities

• Integrate and enhance security within software delivery pipelines using DevSecOps practices
• Support secure delivery for mission-critical systems while aligning to Department of War (DoW) cybersecurity mandates and compliance activities
• Advance secure CI / CD workflows by integrating and automating SAST, DAST, SCA, and container scanning to meet DoW requirements and reduce operational risk
• Improve DevSecOps pipeline security over time by tuning detection thresholds, adjusting scanners, reducing false positives, and optimizing remediation workflows
• Harden infrastructure-as-code (IaC) templates, including Terraform, and enforce policy-as-code across environments
• Perform risk assessments; contribute to system security plans (SSPs) and continuous ATO efforts
• Coordinate with development, operations, and security teams to enable secure software delivery
• Monitor pipeline activity for anomalies and assist with responding to security incidents
• Champion zero trust principles and support adoption across the SDLC

Requirements

• 5+ years of experience in cybersecurity engineering, including DevSecOps in federal or defense environments using IaC / CaC, CI / CD, and SDLC concepts
• 3+ years of software engineering experience using Python, Typescript, or Bash and automation frameworks
• 2+ years implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes
• Experience with AI software development tools including Claude Code, Codex, or Pi
• Experience applying Agile and Change Management methodologies
• Knowledge of cybersecurity best practices and threat-based cybersecurity frameworks, including AI / ML security best practices
• Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools
• Ability to obtain a Secret clearance
• HS diploma or GED

Technologies

• DevSecOps, CI / CD, SDLC
• SAST, DAST, SCA, container scanning
• Terraform, policy-as-code
• AWS cloud, Kubernetes
• Python, Typescript, Bash
• Claude Code, Codex, Pi
• NIST SP 800-53, RMF, eMASS
• STIG Manager, STIG Viewer, SCAP tools
• IaC / CaC, SSPs, ATO

Nice If You Have

• Experience reviewing code samples and applying whitelisting or exemption processes
• Experience developing Zero Trust security solutions for DevSecOps pipelines
• Experience evaluating security tools and assessing fit for inclusion in development or operational environments
• Knowledge of GRC engineering practices, including policy-as-code implementation, automated compliance validation, continuous control monitoring, security control mapping (NIST 800-53, RMF, or CIS), risk assessment automation, POA & M management, audit evidence collection, compliance reporting, and integrating GRC requirements into CI / CD and DevSecOps workflows
• Excellent verbal, technical writing, and documentation skills
• Secret clearance
• Bachelor’s degree in Cybersecurity, Computer Science, or related field
• Security+, AWS Solutions Architect, AWS Security, or CISSP certifications

AI Usage Policy (Candidate)

• Use of AI or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided

Work Model

• Onsite: Work will primarily be performed full-time at a customer facility, collaborating directly with colleagues and customers

Security and Identity Verification

• Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
• Identity verification will use advanced biometrics and AI to ensure authenticity and protect against identity fraud
• Interview and assessment participation requires being on camera
• Company may take your picture to verify identity and prevent fraud

Location: McLean, VA (onsite)

Salary: USD 77,600 - 176,000 per year

Minimum Experience: 2 years

Education: HS diploma or GED