Cybersecurity Engineer – DevOps

Sphera

. Lead cybersecurity for software deployed in secure federal and DoD environments .

Posted 9/17/2026full-timeRemote • United StatesMid-LevelSenior💰 $112,000 - $178,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading cybersecurity initiatives within federal and DoD environments, focusing on RMF processes, compliance with NIST SP 800-53 Rev. 5, and vulnerability management. Proficient in integrating security practices into CI/CD pipelines and managing security documentation and incident response.

Highest-signal resume keywords

Cybersecurity LeadershipRMF Process ManagementSTIG ImplementationFedRAMP and FISMA ComplianceDevSecOps Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk Management Framework (RMF)Security Technical Implementation Guides (STIGs)Vulnerability ManagementIncident ResponseThreat ModelingSecurity Control AssessmentSystem Security PlansApplication Security AssessmentsSecurity Architecture

Soft Skills

Time ManagementOrganizational SkillsInterpersonal SkillsTeam CollaborationAdaptability

Tools & Technologies

DISA-Approved Security ToolsNessusACASSIEMAzure DevOpsJenkinsSASTDASTSCAPKI

Certifications & Qualifications

CompTIA Security+CISSPCEHCAPDoD 8570/8140 IAT Level II

Industry Keywords

Federal SecurityDoD EnvironmentsNIST SP 800-53 Rev. 5OWASP Top 10FISMA ComplianceCI/CD PipelinesSegmented NetworksAccess ControlSecurity Policy UpdatesThird-Party Security Evaluation

Tech Stack

Tools & technologies

AzureCyber SecurityJenkins

About the role

Key responsibilities & impact

Lead cybersecurity for software deployed in secure federal and DoD environments
Execute RMF activities, including system categorization, security control selection, implementation, assessment, and ATO documentation
Implement, configure, and validate STIGs using DISA-approved or equivalent government security tooling
Mitigate OWASP Top 10 and application-layer vulnerabilities
Monitor security controls, scan vulnerabilities, and audit systems; produce reports and coordinate remediation
Manage POA&Ms and coordinate with government security stakeholders, ISSMs, and internal teams
Support FedRAMP and FISMA compliance aligned with NIST SP 800-53 Rev. 5
Integrate security tooling and automated checks into CI/CD pipelines to advance DevSecOps maturity
Conduct threat modeling, security design reviews, and application-level security assessments
Maintain System Security Plans, security architectures, and ATO documentation packages
Lead incident response activities for security events and coordinate with customer cybersecurity personnel
Monitor SIEM alerts, analyze logs, and investigate anomalous activity
Evaluate the security posture of third-party integrations, vendor tools, and emerging technologies
Embed security requirements into sprint planning, feature development, and release processes
Track federal, DoD, DISA, and agency-specific security policy updates and communicate their impact to engineering

Requirements

What you’ll need

U.S. citizen required
Active DoD security clearance or ability to obtain and maintain one due to secure federal enclave access
Minimum 3-5 years of hands-on cybersecurity experience in federal, DoD or similarly regulated secure environments
Strong working knowledge of secure federal or DoD environments, including segmented networks, access control, approved software baselines, and applicable security requirements
Experience supporting or leading RMF processes, including ATO package preparation and submission for federal or DoD systems
Proficiency in applying STIGs using DISA-approved tools (SCC, STIG Viewer, Nessus/ACAS) or comparable vulnerability and compliance platforms
Solid understanding of FedRAMP Moderate and FISMA compliance, with ability to map security controls to NIST SP 800-53 Rev. 5
Experience with vulnerability management tools such as Tenable.sc, Nessus, and ACAS in federal or DoD environments
Familiarity with enterprise security tools including SIEM, IDS/IPS, and network security controls
DevSecOps experience integrating SAST, DAST, and SCA scanning into CI/CD pipelines using Azure DevOps, Jenkins, or equivalent tools
Familiarity with PKI, CAC/PIV authentication, and certificate management in federal or DoD environments
DoD 8570/8140 compliant certification at IAT Level II or higher, such as CompTIA Security+, CISSP, CEH, or CAP
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent practical experience
Experience working in segmented networks with an understanding of federal, DoD, or similarly regulated infrastructure and security requirements
Proven time management, organizational and follow-up skills to meet deadlines
Ability to work effectively, independently, and in a dynamic team environment
Excellent interpersonal skills
Willingness to learn new technologies and processes as needed

Benefits

Comp & perks

Medical, Dental, and Vision Insurance
Health Savings Account
Flexible Spending Account
401(k) Retirement Plan with Company Match
Life and Disability Insurance
Critical Illness Insurance
Accident Insurance
Hospital Indemnity Insurance
Paid Time Off and Holidays
Flexible Working Schedule
Eligible for Variable Compensation Plan