Senior Engineer

🔥 18 hours ago

🤠 Texas – Remote

🤠 Texas – Remote

💵 $140k - $160k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Raft

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🏥 Healthcare

Consulting • Defense • Healthcare

Raft is a company that partners with public agencies to solve complex problems affecting the lives of millions of Americans. Specializing in cutting-edge digital solutions, Raft focuses on data and AI, digital platforms at scale, and complex software applications. The company emphasizes software architecture, UX/UI design, and automated testing to modernize legacy applications and data systems for speed, security, and scalability. Raft also implements sustainable data governance strategies and human-centered AI systems to enhance decision-making. As a government and commercial partner in advancing technology solutions, Raft is dedicated to empowering organizations with products that prioritize user outcomes over features.

📋 Description

• Support a DoW program by incorporating Information Assurance, cybersecurity, and security engineering requirements into DevSecOps pipelines, tooling, configurations, and software delivery processes. • Work with the Pipeline Architect, Software Engineering SMEs, infrastructure/platform engineers, and government stakeholders to meet DoD cybersecurity thresholds. • Translate DoD cybersecurity, RMF, and DevSecOps requirements into actionable technical requirements. • Design, implement, configure, and maintain automated security controls within CI/CD pipelines. • Integrate and maintain SAST, DAST, SCA, container scanning, secrets detection, dependency scanning, and vulnerability management tooling. • Establish and enforce security gates and thresholds in GitLab CI/CD pipelines. • Support secure software supply chain practices, including artifact integrity, SBOM generation, vulnerability scanning, signing, provenance, and attestations. • Integrate security tools such as Fortify, SonarQube, Trivy, Twistlock/Prisma Cloud, NeuVector, and Cosign/Sigstore into automated workflows. • Review Kubernetes, container, GitLab Runner, infrastructure-as-code, and pipeline configurations for security vulnerabilities and weaknesses. • Support vulnerability triage and remediation with software and platform engineering teams. • Develop and maintain security-as-code and policy-as-code approaches. • Support compliance with the DoD DevSecOps Reference Design, NIST RMF, NIST 800-53 controls, and applicable DoD cybersecurity requirements. • Automate security evidence collection for authorization and continuous monitoring. • Partner with platform and application teams on the UP continuous Authority to Operate and CD/CI processes. • Identify cybersecurity risks and recommend technical mitigations. • Develop security documentation, implementation guidance, configuration standards, and engineering best practices. • Participate in architecture reviews, technical discussions, troubleshooting sessions, and security assessments.

🎯 Requirements

• This is a U.S. based position; U.S. citizenship is required for employment and all work must be conducted within the continental U.S. • 3+ years of experience in Cybersecurity Engineering, DevSecOps, Platform Engineering, Cloud Security, Application Security, or a related technical discipline. • Hands-on experience implementing security capabilities within CI/CD pipelines, preferably GitLab CI/CD. • Experience with application or container security technologies such as Fortify, SonarQube, Trivy, Twistlock/Prisma Cloud, NeuVector, or equivalent tools. • Experience with containerized environments and Kubernetes security concepts. • Experience identifying, assessing, and remediating software, container, infrastructure, or configuration vulnerabilities. • Working knowledge of DoD RMF, NIST SP 800-53, and DoD cybersecurity/Information Assurance requirements. • Understanding of DevSecOps principles and integration of security controls throughout the software development lifecycle. • Experience with Git and infrastructure/configuration-as-code technologies such as Terraform, Ansible, Helm, or equivalent technologies. • Understanding of software supply chain security concepts, including SBOMs, artifact signing, provenance, vulnerability scanning, and attestations. • Ability to translate cybersecurity requirements into practical technical controls and communicate effectively with cybersecurity and engineering stakeholders. • Minimum active Secret Clearance required to start • Experience with GitLab, GitLab Runners, Argo CD, Kubernetes, Helm, SOPS, AWS/GovCloud, Platform One, DoD software factories, and DoD cATO environments is preferred. • DoD 8140/8570-compliant cybersecurity certification such as Security+, CySA+, CASP+/SecurityX, CISSP, or equivalent is preferred. • Kubernetes, cloud security, or AWS certifications are desirable.

🏖️ Benefits

• Highly competitive salary • Fully covered healthcare, dental, and vision coverage • 401(k) and company match • Take as you need PTO + 11 paid holidays • Education & training benefits • Generous Referral Bonuses • And More!