DevSecOps Engineer w/Secret Clearance

TekSynap

United States
Remote
Full-time

Apply

Oct 2

View job

Senior Manager, GRC Engineering

Workstreet

United States
Remote
Full-time

Apply

Oct 2

View job

Energy Storage Backend DevSecOps Solutions Engineer - (Senior - Principal level)

ThinkBAC Consulting

United States
Remote
Full-time

Apply

Oct 2

View job

Principal Product Manager, AI-Powered Security Operations

Motorola Solutions

United States
Remote
Full-time

Apply

Oct 2

View job

Security Consultant

AppGate Cybersecurity, Inc.

Mexico
Remote
Full-time

Apply

Oct 2

View job

Security Researcher

AppGate Cybersecurity, Inc.

Colombia
Remote
Full-time

Apply

Oct 2

View job

Security Researcher

AppGate Cybersecurity, Inc.

Argentina
Remote
Full-time

Apply

Oct 2

View job

Application Security Engineer

Yum! Brands

United States
Remote
Full-time

Apply

Oct 2

View job

Cyber Security / SOC Analyst (Weekend Nights)

phia, LLC

United States
Remote
Full-time

Apply

Oct 2

View job

Staff Security Analyst - GRC

Harness

United States
Remote
Full-time

Apply

Oct 2

View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

Suriname
Remote
Full-time

Apply

Oct 2

View job

Associate Security Analyst

PM Consulting

Philippines
Remote
Full-time

Apply

Oct 2

View job

Systems Security Administrator - Senior

Experian

Costa Rica
Remote
Full-time

Apply

Oct 2

View job

Senior Offensive Security Engineer (Red Team)

Salesforce

United States
Remote
Full-time

Apply

Oct 2

View job

Cybersecurity Project Manager

9th Way Insignia

United States
Remote
Full-time

Apply

Oct 2

View job

VP, Security

Stord

United States
Remote
Full-time

Apply

Oct 2

View job

AI Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or

GuidePoint Security LLC

United States
Remote
Full-time

Apply

Oct 2

View job

Systems Engineer – Identity & Access Management (IAM)

Sphere, Inc.

United States
Remote
Full-time

Apply

Oct 2

View job

Cybersecurity Data Analytics Engineer

Danaher

Poland
Remote
Full-time

Apply

Oct 2

View job

Sr DevSecOps Automation Solution Architect

General Dynamics Information Technology

United States
Remote
Full-time

Apply

Oct 2

View job

IT Security Consultant / Engineer Network Security (m/w)

protectONE - R. Franz Gödde

Germany
Remote
Full-time

Apply

Oct 2

View job

RMF / Cybersecurity Compliance Specialist (Pipeline)

Lucayan Technology Solutions LLC

United States
Remote
Full-time

Apply

Oct 2

View job

Mid to Senior SAP Auth and GRC Consultant - Remote within South Africa

K5 Business

South Africa
Remote
Full-time

Apply

Oct 2

View job

Senior Security Engineer

HealthMark Group

United States
Remote
Full-time

Apply

Oct 2

View job

VP, Information Security and Compliance

Veritone

United States
Remote
Full-time

Apply

Oct 2

View job

Information Systems Security Manager

Technatomy

United States
Remote
Full-time

Apply

Oct 2

View job

IT Audit, Cybersecurity & Risk Senior Consultant

Baker Tilly

United States
Remote
Full-time

Apply

Oct 2

View job

Information Security Engineer

Exostar

United States
Remote
Full-time

Apply

Oct 2

View job

Security Engineer

Soteria

United States
Remote
Full-time

Apply

Oct 2

View job

Security Analyst, GRC

Radiology Partners

United States
Remote
Full-time

Apply

Oct 2

RMF / Cybersecurity Compliance Specialist (Pipeline)

Lucayan Technology Solutions LLC

RMF / Cybersecurity Compliance Specialist (Pipeline)

United StatesRemoteFull-time

Posted Oct 2

Apply

Job Description

About Lucayan Technology Solutions LLC

At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Join Our Pipeline for Future Opportunities!

This posting is intended to establish a pool of qualified candidates for future openings supporting ongoing operations. Positions may become available based on staffing needs, operational requirements, or workforce changes. Qualified applicants may be contacted as opportunities arise.

Job Summary

Lucayan Technology Solutions LLC is seeking an RMF / Cybersecurity Compliance Specialist to support the U.S. Army Corps of Engineers (USACE) Walla Walla Business Intelligence (WWBI) program. This role owns cybersecurity compliance, Risk Management Framework (RMF) documentation, continuous monitoring, vulnerability management, and authorization artifacts, working closely with software developers, DevSecOps personnel, technical leadership, and Government stakeholders to ensure WWBI continuously complies with applicable Department of Defense (DoD), U.S. Army, USACE, and Civil Works Business Intelligence (CWBI) cybersecurity requirements. This position also supports maintenance of the WWBI authorization package and the program's planned migration into the CWBI Cloud and eventual integration into the CWBI security boundary.

Key Responsibilities

Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the System Security Plan (SSP), Continuity of Operations Plan (COOP), Incident Response Plan (IRP), System Design Documents, and related authorization artifacts.
Manage and document program-specific security controls applicable to the WWBI system, and support security requirements associated with Personally Identifiable Information (PII).
Maintain documentation defining the WWBI authorization boundary, including applicable hardware, software, ports, protocols, interfaces, and data flows.
Coordinate cybersecurity documentation and compliance activities associated with WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary.
Maintain WWBI compliance records within the Enterprise Mission Assurance Support Service (eMASS), including uploading, mapping, organizing, and maintaining required RMF documentation, security-control evidence, implementation statements, and supporting artifacts.
Support execution of the WWBI continuous-monitoring program, including coordinating and/or performing required ACAS and SCAP security scans, and maintaining a compliance score of at least 90% for applicable SCAP scans.
Import and maintain security-scan results within DISA STIG Viewer and eMASS; analyze identified vulnerabilities and coordinate remediation activities with software developers and Government technical personnel.
Track Critical and High findings for immediate remediation, Moderate findings for remediation within 60 days, and Low findings for remediation within 120 days; document approved exceptions and outstanding findings within the Plan of Actions and Milestones (POA&M).
Develop, maintain, and submit the quarterly POA&M report detailing open, remediated, and outstanding security findings, and support quarterly updates to the RMF documentation package.
Provide ACAS/SCAP scan results and associated STIG Viewer files following required scans, and maintain current system security, network topology, logical, and data-flow documentation in coordination with the development team.
Complete and maintain security-control checklists required by the USACE CWBI Cloud environment, and monitor changes to CWBI cybersecurity requirements to coordinate implementation of new or modified requirements.
Support annual Federal Information Security Management Act (FISMA) reporting requirements and associated forms, checklists, and documentation.
Support compliance with applicable DoD Security Technical Implementation Guides (STIGs), Army cybersecurity requirements, and USACE policies, coordinating with developers and DevSecOps personnel to ensure applications and infrastructure remain compliant through modernization and cloud-migration activities.

Required Qualifications

●U.S. Citizenship required.

Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation.
Experience using Enterprise Mission Assurance Support Service (eMASS).
Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes.
Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring.
Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer.
Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams.
Strong technical writing and documentation skills, with strong organizational skills and the ability to manage multiple recurring compliance requirements and deadlines.
Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders.
Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance.
Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of the contract start date, as applicable to the assigned DoD 8140 work role.

Preferred Qualifications

Previous experience supporting USACE systems or applications.
Experience supporting DoD systems through ATO authorization and continuous monitoring.
Experience with AWS GovCloud or other DoD-authorized cloud environments.
Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization.
Experience supporting cloud migration of systems operating under an existing RMF authorization.

●Experience with FISMA reporting.

Certifications

Active Tier 1 (or higher) background investigation prior to start.
CompTIA Security+ or a DoD 8140-approved equivalent required within six (6) months of contract start.
CISSP or another advanced DoD-recognized cybersecurity certification desired.

Originally posted on Himalayas

Job Description

About Lucayan Technology Solutions LLC

Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Join Our Pipeline for Future Opportunities!

Job Summary

Key Responsibilities

Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the System Security Plan (SSP), Continuity of Operations Plan (COOP), Incident Response Plan (IRP), System Design Documents, and related authorization artifacts.
Manage and document program-specific security controls applicable to the WWBI system, and support security requirements associated with Personally Identifiable Information (PII).
Maintain documentation defining the WWBI authorization boundary, including applicable hardware, software, ports, protocols, interfaces, and data flows.
Coordinate cybersecurity documentation and compliance activities associated with WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary.
Maintain WWBI compliance records within the Enterprise Mission Assurance Support Service (eMASS), including uploading, mapping, organizing, and maintaining required RMF documentation, security-control evidence, implementation statements, and supporting artifacts.
Support execution of the WWBI continuous-monitoring program, including coordinating and/or performing required ACAS and SCAP security scans, and maintaining a compliance score of at least 90% for applicable SCAP scans.
Import and maintain security-scan results within DISA STIG Viewer and eMASS; analyze identified vulnerabilities and coordinate remediation activities with software developers and Government technical personnel.
Track Critical and High findings for immediate remediation, Moderate findings for remediation within 60 days, and Low findings for remediation within 120 days; document approved exceptions and outstanding findings within the Plan of Actions and Milestones (POA&M).
Develop, maintain, and submit the quarterly POA&M report detailing open, remediated, and outstanding security findings, and support quarterly updates to the RMF documentation package.
Provide ACAS/SCAP scan results and associated STIG Viewer files following required scans, and maintain current system security, network topology, logical, and data-flow documentation in coordination with the development team.
Complete and maintain security-control checklists required by the USACE CWBI Cloud environment, and monitor changes to CWBI cybersecurity requirements to coordinate implementation of new or modified requirements.
Support annual Federal Information Security Management Act (FISMA) reporting requirements and associated forms, checklists, and documentation.
Support compliance with applicable DoD Security Technical Implementation Guides (STIGs), Army cybersecurity requirements, and USACE policies, coordinating with developers and DevSecOps personnel to ensure applications and infrastructure remain compliant through modernization and cloud-migration activities.

Required Qualifications

●U.S. Citizenship required.

Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation.
Experience using Enterprise Mission Assurance Support Service (eMASS).
Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes.
Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring.
Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer.
Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams.
Strong technical writing and documentation skills, with strong organizational skills and the ability to manage multiple recurring compliance requirements and deadlines.
Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders.
Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance.
Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of the contract start date, as applicable to the assigned DoD 8140 work role.

Preferred Qualifications

Previous experience supporting USACE systems or applications.
Experience supporting DoD systems through ATO authorization and continuous monitoring.
Experience with AWS GovCloud or other DoD-authorized cloud environments.
Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization.
Experience supporting cloud migration of systems operating under an existing RMF authorization.

●Experience with FISMA reporting.

Certifications

Active Tier 1 (or higher) background investigation prior to start.
CompTIA Security+ or a DoD 8140-approved equivalent required within six (6) months of contract start.
CISSP or another advanced DoD-recognized cybersecurity certification desired.

Originally posted on Himalayas

Job Description

About Lucayan Technology Solutions LLC

Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Join Our Pipeline for Future Opportunities!

Job Summary

Key Responsibilities

Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the System Security Plan (SSP), Continuity of Operations Plan (COOP), Incident Response Plan (IRP), System Design Documents, and related authorization artifacts.
Manage and document program-specific security controls applicable to the WWBI system, and support security requirements associated with Personally Identifiable Information (PII).
Maintain documentation defining the WWBI authorization boundary, including applicable hardware, software, ports, protocols, interfaces, and data flows.
Coordinate cybersecurity documentation and compliance activities associated with WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary.
Maintain WWBI compliance records within the Enterprise Mission Assurance Support Service (eMASS), including uploading, mapping, organizing, and maintaining required RMF documentation, security-control evidence, implementation statements, and supporting artifacts.
Support execution of the WWBI continuous-monitoring program, including coordinating and/or performing required ACAS and SCAP security scans, and maintaining a compliance score of at least 90% for applicable SCAP scans.
Import and maintain security-scan results within DISA STIG Viewer and eMASS; analyze identified vulnerabilities and coordinate remediation activities with software developers and Government technical personnel.
Track Critical and High findings for immediate remediation, Moderate findings for remediation within 60 days, and Low findings for remediation within 120 days; document approved exceptions and outstanding findings within the Plan of Actions and Milestones (POA&M).
Develop, maintain, and submit the quarterly POA&M report detailing open, remediated, and outstanding security findings, and support quarterly updates to the RMF documentation package.
Provide ACAS/SCAP scan results and associated STIG Viewer files following required scans, and maintain current system security, network topology, logical, and data-flow documentation in coordination with the development team.
Complete and maintain security-control checklists required by the USACE CWBI Cloud environment, and monitor changes to CWBI cybersecurity requirements to coordinate implementation of new or modified requirements.
Support annual Federal Information Security Management Act (FISMA) reporting requirements and associated forms, checklists, and documentation.
Support compliance with applicable DoD Security Technical Implementation Guides (STIGs), Army cybersecurity requirements, and USACE policies, coordinating with developers and DevSecOps personnel to ensure applications and infrastructure remain compliant through modernization and cloud-migration activities.

Required Qualifications

●U.S. Citizenship required.

Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation.
Experience using Enterprise Mission Assurance Support Service (eMASS).
Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes.
Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring.
Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer.
Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams.
Strong technical writing and documentation skills, with strong organizational skills and the ability to manage multiple recurring compliance requirements and deadlines.
Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders.
Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance.
Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of the contract start date, as applicable to the assigned DoD 8140 work role.

Preferred Qualifications

Previous experience supporting USACE systems or applications.
Experience supporting DoD systems through ATO authorization and continuous monitoring.
Experience with AWS GovCloud or other DoD-authorized cloud environments.
Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization.
Experience supporting cloud migration of systems operating under an existing RMF authorization.

●Experience with FISMA reporting.

Certifications

Active Tier 1 (or higher) background investigation prior to start.
CompTIA Security+ or a DoD 8140-approved equivalent required within six (6) months of contract start.
CISSP or another advanced DoD-recognized cybersecurity certification desired.

Originally posted on Himalayas

Job Description

About Lucayan Technology Solutions LLC

Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Join Our Pipeline for Future Opportunities!

Job Summary

Key Responsibilities

Develop, update, and maintain WWBI Risk Management Framework authorization documentation, including the System Security Plan (SSP), Continuity of Operations Plan (COOP), Incident Response Plan (IRP), System Design Documents, and related authorization artifacts.
Manage and document program-specific security controls applicable to the WWBI system, and support security requirements associated with Personally Identifiable Information (PII).
Maintain documentation defining the WWBI authorization boundary, including applicable hardware, software, ports, protocols, interfaces, and data flows.
Coordinate cybersecurity documentation and compliance activities associated with WWBI's migration into the CWBI Cloud and eventual incorporation into the CWBI authorization boundary.
Maintain WWBI compliance records within the Enterprise Mission Assurance Support Service (eMASS), including uploading, mapping, organizing, and maintaining required RMF documentation, security-control evidence, implementation statements, and supporting artifacts.
Support execution of the WWBI continuous-monitoring program, including coordinating and/or performing required ACAS and SCAP security scans, and maintaining a compliance score of at least 90% for applicable SCAP scans.
Import and maintain security-scan results within DISA STIG Viewer and eMASS; analyze identified vulnerabilities and coordinate remediation activities with software developers and Government technical personnel.
Track Critical and High findings for immediate remediation, Moderate findings for remediation within 60 days, and Low findings for remediation within 120 days; document approved exceptions and outstanding findings within the Plan of Actions and Milestones (POA&M).
Develop, maintain, and submit the quarterly POA&M report detailing open, remediated, and outstanding security findings, and support quarterly updates to the RMF documentation package.
Provide ACAS/SCAP scan results and associated STIG Viewer files following required scans, and maintain current system security, network topology, logical, and data-flow documentation in coordination with the development team.
Complete and maintain security-control checklists required by the USACE CWBI Cloud environment, and monitor changes to CWBI cybersecurity requirements to coordinate implementation of new or modified requirements.
Support annual Federal Information Security Management Act (FISMA) reporting requirements and associated forms, checklists, and documentation.
Support compliance with applicable DoD Security Technical Implementation Guides (STIGs), Army cybersecurity requirements, and USACE policies, coordinating with developers and DevSecOps personnel to ensure applications and infrastructure remain compliant through modernization and cloud-migration activities.

Required Qualifications

●U.S. Citizenship required.

Demonstrated experience supporting the DoD Risk Management Framework (RMF), including developing and maintaining RMF authorization packages and cybersecurity documentation.
Experience using Enterprise Mission Assurance Support Service (eMASS).
Knowledge of DoD, U.S. Army, and/or USACE cybersecurity requirements and processes.
Experience with vulnerability management, security controls, POA&Ms, and continuous monitoring.
Experience with ACAS, SCAP, DISA STIGs, and STIG Viewer.
Ability to interpret technical vulnerability findings and coordinate remediation with software-development and infrastructure teams.
Strong technical writing and documentation skills, with strong organizational skills and the ability to manage multiple recurring compliance requirements and deadlines.
Ability to communicate effectively with technical personnel, program leadership, and Government stakeholders.
Active federal background investigation at the Tier 1 level or higher prior to beginning contract performance.
Ability to obtain and maintain CompTIA Security+ or a DoD-approved equivalent within six months of the contract start date, as applicable to the assigned DoD 8140 work role.

Preferred Qualifications

Previous experience supporting USACE systems or applications.
Experience supporting DoD systems through ATO authorization and continuous monitoring.
Experience with AWS GovCloud or other DoD-authorized cloud environments.
Familiarity with DevSecOps, GitHub, secure software-development pipelines, and application modernization.
Experience supporting cloud migration of systems operating under an existing RMF authorization.

●Experience with FISMA reporting.

Certifications

Active Tier 1 (or higher) background investigation prior to start.
CompTIA Security+ or a DoD 8140-approved equivalent required within six (6) months of contract start.
CISSP or another advanced DoD-recognized cybersecurity certification desired.

Originally posted on Himalayas