Platform Security Engineer

#restonfed

Kforce has a client that is seeking a Platform Security Engineer in McLean, VA.

Overview:

We are seeking an experienced Platform Security Engineer to integrate security through cloud infrastructure, software development, and CI/CD pipelines. This role will focus on DevSecOps, AWS cloud security, application security automation, Infrastructure as Code, and continuous compliance within a highly regulated environment. The ideal candidate combines hands-on software engineering and automation skills with strong knowledge of cybersecurity frameworks, vulnerability management, and secure software development practices.

Key Responsibilities:

• Design, enhance, and secure DevSecOps and CI/CD pipelines
• Integrate and automate application security capabilities, including SAST, DAST, Software Composition Analysis (SCA), and container scanning
• Tune vulnerability detection tools, reduce false positives, and improve remediation workflows
• Secure and harden Infrastructure as Code (IaC), including Terraform configurations
• Implement and maintain policy-as-code and automated compliance controls
• Develop security automation using Python, TypeScript, Bash, and related frameworks
• Implement cybersecurity solutions within AWS and Kubernetes environments
• Conduct security risk assessments and contribute to System Security Plans (SSPs) and continuous ATO activities
• Support compliance with NIST SP 800-53, RMF, STIG, and related security requirements
• Monitor DevSecOps pipeline activity for security anomalies and assist with incident response
• Partner with development, operations, and security teams to embed Zero Trust principles throughout the software development lifecycle
• Continuously evaluate security tools and technologies for integration into development and production environments
• High School diploma or GED
• 5+ years of cybersecurity engineering experience, including DevSecOps experience within federal, defense, or similarly regulated environments
• 3+ years of software engineering or automation experience using Python, TypeScript, or Bash
• 2+ years of experience implementing cybersecurity solutions in AWS and containerized/Kubernetes environments
• Strong experience with CI/CD, SDLC, Infrastructure as Code, and Compliance as Code concepts
• Experience integrating security testing capabilities such as SAST, DAST, SCA, and container vulnerability scanning
• Experience with NIST SP 800-53, Risk Management Framework (RMF), eMASS, STIG Manager, STIG Viewer, and SCAP tools
• Experience using Agile and change-management methodologies
• Experience with AI-assisted software development tools such as Claude Code, Codex, or Pi
• Knowledge of cybersecurity and threat-based security frameworks, including emerging AI/ML security practices
• Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information

Preferred:

• Bachelor's degree in Cybersecurity, Computer Science, or a related technical field
• Certifications such as CompTIA Security+, AWS Certified Solutions Architect, AWS Certified Security - Specialty, or CISSP
• Experience developing Zero Trust security solutions for DevSecOps pipelines
• Experience reviewing source code and managing security whitelisting or exemption processes
• Experience evaluating security tools for development and operational environments
• Experience with Governance, Risk, and Compliance (GRC) engineering, including: Policy-as-code; Automated compliance validation; Continuous control monitoring; NIST 800-53, RMF, and CIS control mapping; Automated risk assessments; POA&M management; Audit evidence collection; Compliance reporting
• Experience integrating GRC requirements directly into CI/CD and DevSecOps workflows

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.