Software Gigs

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability and compliance assessments using industry-standard tools like eMASS and ACAS. You'll troubleshoot complex security challenges, assess network and system threats, implement infrastructure controls, and communicate security risks to both technical and non-technical audiences. The role requires 3+ years of experience leading Risk Management Framework (RMF) activities for DoD projects, vulnerability scanning, and security control implementation. You'll work closely with Navy missions to identify cyber risks, recommend solutions, and provide hands-on support using your knowledge of cybersecurity policy, networks, system infrastructure, and risk management.

Design, implement, and maintain secure DevSecOps automation frameworks across on-premise and cloud infrastructure, integrating security controls into CI/CD pipelines for application and configuration deployment. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, Python, and Bash across Windows, Linux, VMware, Azure, and hybrid environments. Automate provisioning, patching, vulnerability remediation, and compliance checks aligned with FFIEC, NCUA, CIS, and NIST standards while partnering with Cybersecurity, Infrastructure, and Application Development teams. Support container/platform engineering, cloud identity governance, and promote DevSecOps and GitOps practices across technology teams.

Design, implement, and maintain secure DevSecOps automation frameworks and CI/CD pipelines across hybrid infrastructure, cloud, and application platforms. Develop Infrastructure as Code using Terraform, Ansible, ARM/Bicep, PowerShell, and Python to automate provisioning, configuration management, patching, and vulnerability remediation across Windows, Linux, VMware, and Azure environments. Integrate security controls into deployment pipelines including vulnerability scanning, secrets detection, code scanning, and policy enforcement aligned with FFIEC, NCUA, CIS, and NIST standards. Partner across Infrastructure, Security, and Application Development teams to advance DevSecOps practices, container engineering, and secure cloud governance.

This is a hands-on product security role focused on threat modeling and cybersecurity risk management for medical devices and SaMD platforms. You'll conduct security risk assessments, build FDA submission documentation (510(k) files, risk management files, SBOMs), review security architecture, and maintain risk and vulnerability management plans. The role requires 5+ years of cybersecurity or product security experience, with strong preference for FDA documentation and regulated medical device background, and working knowledge of NIST frameworks, OWASP, and secure SDLC practices.