Senior Cybersecurity Solutions Engineer

AFS is seeking a seasoned and strategic Sr. Cybersecurity Solutions Engineer to lead security initiatives within our state-of-the-art DevSecOps environment. The ideal candidate is an expert in implementing comprehensive security measures to protect critical systems and networks. This senior role demands a deep command of security pipeline automation, containerization technologies, and expert proficiency in applying DISA Security Technical Implementation Guides (STIGs). The successful candidate will have a proven track record of architecting and implementing robust security solutions in both on-premises and cloud environments and will be a key leader in collaborating with other IT professionals to fortify the organization's systems and data.

Responsibilities

Lead the architecture, deployment, and management of advanced security solutions (Scanning, IDS/IPS, NIDS/NIPS, SIEM) in cloud and cloud air-gapped environments; Drive a security-first culture by empowering developers and data scientists, acting as a key security evangelist to remove friction and embed security from the start; Architect and enforce appropriate measures for secure application development and supply chain protection; Define and drive technical solutions to meet NIST 800-53 Risk Management Framework (RMF) and CNSSI 1253 controls, leading the development of security policies, procedures, and guidelines; Own and direct the remediation efforts for Plan of Action & Milestones (POA&M) items associated with technology-related controls and findings; Architect and implement comprehensive security solutions within container orchestration technologies such as Docker and Kubernetes; Lead risk and vulnerability assessments by designing and integrating automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines; Ensure rigorous compliance by mandating and verifying the application of DISA STIGs across all relevant systems; Serve as the primary security consultant, collaborating with IT and development teams to ensure security is architected into all aspects of the organization's IT infrastructure; Stay ahead of emerging threats, tools, and techniques to architect and recommend defense-in-depth strategies that mitigate risk to the organization; Provide technical leadership and mentorship to the team on advanced cybersecurity best practices and cyber hygiene

Requirements

Possess and maintain relevant DoD 8570/8140 IAT level II Certification; 8 years of progressive experience in cybersecurity, or equivalent professional experience; Extensive background in incident response and/or DevSecOps leadership; Expert understanding of Linux/Unix Administration; Deep, hands-on experience with containerization and orchestration technologies, particularly Docker and Kubernetes; High proficiency in one or more computer programming languages commonly used in scripting & automation, such as Bash, Python, Go, or Rust; Expertise in applying DISA STIGs within complex cloud and containerized environments; Demonstrated leadership in automating deployments and developing mature infrastructure as code (IaC) practices; Strong background in DevOps practices and mastery of tools, including Git, Ansible, and Terraform; An active TS/SCI is required; Applicants must have work authorization in the US that does not now or in the future require visa sponsorship

Nice to have

Possess one or more of the following certifications: AWS DevOps Professional, Certified Kubernetes Security Specialist, GIAC Cloud Security Automation (GCSA), Certified DevSecOps Professional (CDP); Direct experience with Elasticsearch, Kibana (ELK) Stack deployment and maintenance to include fleet and agent setup; AWS Elastic Kubernetes Service (EKS) experience; Gitlab CI/CD pipeline engineering experience; Familiarity with one or more programming languages

Benefits

Wide variety of benefits