About the Role: AFS is seeking a seasoned and strategic Sr. Cybersecurity Solutions Engineer to lead security initiatives within our state-of-the-art DevSecOps environment. The ideal candidate is an expert in implementing comprehensive security measures to protect critical systems and networks. This senior role demands a deep command of security pipeline automation, containerization technologies, and expert proficiency in applying DISA Security Technical Implementation Guides (STIGs). The successful candidate will have a proven track record of architecting and implementing robust security solutions in both on-premises and cloud environments and will be a key leader in collaborating with other IT professionals to fortify the organization's systems and data.

Responsibilities:

• Lead the architecture, deployment, and management of advanced security solutions (Scanning, IDS/IPS, NIDS/NIPS, SIEM) in cloud and cloud air-gapped environments.
• Drive a security-first culture by empowering developers and data scientists, acting as a key security evangelist to remove friction and embed security from the start.
• Architect and enforce appropriate measures for secure application development and supply chain protection.
• Define and drive technical solutions to meet NIST 800-53 Risk Management Framework (RMF) and CNSSI 1253 controls, leading the development of security policies, procedures, and guidelines.
• Own and direct the remediation efforts for Plan of Action & Milestones (POA&M) items associated with technology-related controls and findings.
• Architect and implement comprehensive security solutions within container orchestration technologies such as Docker and Kubernetes.
• Lead risk and vulnerability assessments by designing and integrating automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines.
• Ensure rigorous compliance by mandating and verifying the application of DISA STIGs across all relevant systems.
• Serve as the primary security consultant, collaborating with IT and development teams to ensure security is architected into all aspects of the organization's IT infrastructure.
• Stay ahead of emerging threats, tools, and techniques to architect and recommend defense-in-depth strategies that mitigate risk to the organization.
• Provide technical leadership and mentorship to the team on advanced cybersecurity best practices and cyber hygiene.

Qualifications:

• Possess and maintain relevant DoD 8570/8140 IAT level II Certification.
• 8 years of progressive experience in cybersecurity, or equivalent professional experience with any of the following technology/skills:.
• Extensive background in incident response and/or DevSecOps leadership.
• Expert understanding of Linux/Unix Administration.
• Deep, hands-on experience with containerization and orchestration technologies, particularly Docker and Kubernetes.
• High proficiency in one or more computer programming languages commonly used in scripting & automation, such as Bash, Python, Go, or Rust.
• Expertise in applying DISA STIGs within complex cloud and containerized environments.
• Demonstrated leadership in automating deployments and developing mature infrastructure as code (IaC) practices.
• Strong background in DevOps practices and mastery of tools, including Git, Ansible, and Terraform.
• Excellent problem-solving skills and the ability to thrive in a fast-paced, evolving environment.
• Effective communication skills, both written and verbal, with the ability to present complex technical information to technical and non-technical audiences.

Preferred to have:

• Possess one or more of the following certifications: AWS DevOps Professional, Certified Kubernetes Security Specialist, GIAC Cloud Security Automation (GCSA), Certified DevSecOps Professional (CDP).
• Direct experience with Elasticsearch, Kibana (ELK) Stack deployment and maintenance to include fleet and agent setup.
• AWS Elastic Kubernetes Service (EKS) experience.
• Gitlab CI/CD pipeline engineering experience.
• Familiarity with one or more programming languages.

Clearance:

• An active TS/SCI is required