Senior Engineer

Raft

. Support a DoW program by incorporating Information Assurance, cybersecurity, and security engineering requirements into DevSecOps pipelines, tooling, configurations, and software delivery processes.

Posted 9/15/2026full-timeRemote • Texas • United StatesSenior💰 $140,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in integrating cybersecurity and security engineering requirements into DevSecOps pipelines, with a strong focus on automated security controls and compliance with DoD cybersecurity standards. Proficient in vulnerability management and security documentation, ensuring secure software supply chain practices.

Highest-signal resume keywords

Cybersecurity EngineeringDevSecOps ImplementationCI/CD Pipeline SecurityDoD RMF ComplianceKubernetes Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls ImplementationVulnerability ManagementInfrastructure-as-CodeContainer SecurityAutomated Security Evidence CollectionConfiguration Standards DevelopmentSecurity-as-CodePolicy-as-CodeArtifact SigningContinuous Monitoring

Soft Skills

Effective CommunicationTechnical Mitigation Recommendations

Tools & Technologies

GitLab CI/CDFortifySonarQubeTrivyTwistlock/Prisma CloudNeuVectorCosign/SigstoreTerraformAnsibleHelm

Certifications & Qualifications

Security+CySA+CASP+/SecurityXCISSP

Industry Keywords

DoD CybersecurityNIST SP 800-53Information AssuranceSoftware Supply Chain SecuritySBOM Generation

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityKubernetesTerraform

About the role

Key responsibilities & impact

Support a DoW program by incorporating Information Assurance, cybersecurity, and security engineering requirements into DevSecOps pipelines, tooling, configurations, and software delivery processes.
Work with the Pipeline Architect, Software Engineering SMEs, infrastructure/platform engineers, and government stakeholders to meet DoD cybersecurity thresholds.
Translate DoD cybersecurity, RMF, and DevSecOps requirements into actionable technical requirements.
Design, implement, configure, and maintain automated security controls within CI/CD pipelines.
Integrate and maintain SAST, DAST, SCA, container scanning, secrets detection, dependency scanning, and vulnerability management tooling.
Establish and enforce security gates and thresholds in GitLab CI/CD pipelines.
Support secure software supply chain practices, including artifact integrity, SBOM generation, vulnerability scanning, signing, provenance, and attestations.
Integrate security tools such as Fortify, SonarQube, Trivy, Twistlock/Prisma Cloud, NeuVector, and Cosign/Sigstore into automated workflows.
Review Kubernetes, container, GitLab Runner, infrastructure-as-code, and pipeline configurations for security vulnerabilities and weaknesses.
Support vulnerability triage and remediation with software and platform engineering teams.
Develop and maintain security-as-code and policy-as-code approaches.
Support compliance with the DoD DevSecOps Reference Design, NIST RMF, NIST 800-53 controls, and applicable DoD cybersecurity requirements.
Automate security evidence collection for authorization and continuous monitoring.
Partner with platform and application teams on the UP continuous Authority to Operate and CD/CI processes.
Identify cybersecurity risks and recommend technical mitigations.
Develop security documentation, implementation guidance, configuration standards, and engineering best practices.
Participate in architecture reviews, technical discussions, troubleshooting sessions, and security assessments.

Requirements

What you’ll need

This is a U.S. based position; U.S. citizenship is required for employment and all work must be conducted within the continental U.S.
3+ years of experience in Cybersecurity Engineering, DevSecOps, Platform Engineering, Cloud Security, Application Security, or a related technical discipline.
Hands-on experience implementing security capabilities within CI/CD pipelines, preferably GitLab CI/CD.
Experience with application or container security technologies such as Fortify, SonarQube, Trivy, Twistlock/Prisma Cloud, NeuVector, or equivalent tools.
Experience with containerized environments and Kubernetes security concepts.
Experience identifying, assessing, and remediating software, container, infrastructure, or configuration vulnerabilities.
Working knowledge of DoD RMF, NIST SP 800-53, and DoD cybersecurity/Information Assurance requirements.
Understanding of DevSecOps principles and integration of security controls throughout the software development lifecycle.
Experience with Git and infrastructure/configuration-as-code technologies such as Terraform, Ansible, Helm, or equivalent technologies.
Understanding of software supply chain security concepts, including SBOMs, artifact signing, provenance, vulnerability scanning, and attestations.
Ability to translate cybersecurity requirements into practical technical controls and communicate effectively with cybersecurity and engineering stakeholders.
Minimum active Secret Clearance required to start
Experience with GitLab, GitLab Runners, Argo CD, Kubernetes, Helm, SOPS, AWS/GovCloud, Platform One, DoD software factories, and DoD cATO environments is preferred.
DoD 8140/8570-compliant cybersecurity certification such as Security+, CySA+, CASP+/SecurityX, CISSP, or equivalent is preferred.
Kubernetes, cloud security, or AWS certifications are desirable.

Benefits

Comp & perks

Highly competitive salary
Fully covered healthcare, dental, and vision coverage
401(k) and company match
Take as you need PTO + 11 paid holidays
Education & training benefits
Generous Referral Bonuses
And More!