
Cybersecurity Engineer - Clearance Required
Cydecor, Inc5 days ago
Norfolk, VA, USASenior
Base Salary
$120k - $145k/yr
Responsibilities
- Run and tune SAST, DAST, software composition analysis, and container/image scanning across the CI/CD pipeline.
- Triage, prioritize, track, and drive cybersecurity findings through remediation and closure with development teams.
- Review source code and dependencies for security issues and provide actionable remediation guidance.
- Apply STIGs and hardening baselines while managing vulnerability response, patching cadence, and dependency updates.
- Perform Security Impact Analyses for proposed changes to authorized Navy information systems.
- Review DoD and Navy Cyber Tasking Orders and related cyber directives for applicability and coordinate compliance activities.
- Maintain alignment with the program’s Risk Management Framework posture and provide documentation, evidence, and technical inputs for accreditation and continuous monitoring.
- Communicate cybersecurity posture, risks, and recommendations to technical and non-technical stakeholders and improve team security standards and reusable solutions.
Requirements
- 5+ years of cybersecurity engineering experience focused on the software development life cycle and vulnerability management.
- Experience securing CI/CD pipelines with tools such as SonarQube, Fortify, Checkmarx, or Snyk in Azure DevOps or comparable platforms.
- Experience with STIG application, ACAS/Nessus or equivalent vulnerability scanning, secure code review, dependency management, and patch management.
- Working knowledge of the DoD Risk Management Framework.
- IAM Level II Information Assurance certification under DoDI 8570.01-M and SECNAV M-5239.2, or an equivalent qualification under DoDM 8140.03 at Basic or Intermediate proficiency.
- Bachelor’s degree in computer science, cybersecurity, engineering, or a related technical field; additional relevant experience may substitute for the degree.
- Interim or active DoD Secret security clearance.
- Preferred qualifications include CSSLP, GWAPT, GWEB, CySA+, CISSP, DoD or Navy software-program experience, and cloud-hosted workload or container-security experience.
Benefits
- Projected base compensation is $120,000-$145,000 per year.
- Health, dental, vision, life, short-term disability, and long-term disability insurance.
- 401(k) with company match, paid time off, and paid company holidays.
- Tuition and professional development assistance.
- Monday-Friday, 8-hour work schedule.
Tech Stack
SonarQube