Cybersecurity Engineer (DevSecOps)

Arcfield Overview: STC, a wholly owned subsidiary of Arcfield, was founded to do systems engineering differently. As an industry-leading solutions provider in digital engineering and model-based systems engineering (MBSE), the company delivers MBSE-as-a-Service, integrated digital engineering environment deployments, training and consulting to both commercial and public sector customers. Every day, STC’s team of expert engineers are unleashing the power of digital engineering to navigate complexity, increase understanding and inform decision-making. Learn more at stc.arcfield.com. Responsibilities:

This position is for Strategic Technology Consulting (STC), an Arcfield Company

Roles and Responsibilities

The candidate should be capable of working independently as a contributor to software development team. He or she should exhibit expertise in:

• Design, implement, and maintain security controls across cloud (AWS/Azure), on-premises, AI, and classified environments.
• Support security accreditation and compliance activities for systems governed by NIST SP 800-53, RMF, NIST SP 800-171, CMMC, and FedRAMP, specifically focusing on achieving ATOs for high-side classified deployments.
• Coordinate with IT, Corporate Security, Program Security, software engineering teams, and government customers to ensure security requirements are incorporated throughout the system lifecycle.
• Conduct vulnerability assessments, security reviews, and remediation tracking across our React frontend, Python (FastAPI) backends, and Java-based Cameo plugins.
• Implement DevSecOps practices within GitLab CI/CD pipelines, integrating automated security scanning tools (e.g., Trivy, Semgrep, yGuard, and OWASP tools) into secure software development processes.
• Monitor security events and system health, leveraging Prometheus and Grafana, and support incident response activities.
• Configure and manage identity, access management (IAM), privileged access, and leas