Cyber Engineer (Active Secret Clearance)

Cyber Engineer – Level 2Location: Redstone Arsenal, Huntsville, AlabamaWork Arrangement: On-siteExperience: 2+ YearsSecurity Clearance: Active Secret Clearance RequiredAbout the OpportunityRedBeard Solutions is seeking a Cyber Engineer – Level 2 to support cloud security, container security, and DevSecOps initiatives within classified and sensitive environments.This role will focus on securing Infrastructure-as-a-Service (IaaS) environments, supporting Continuous Authorization (cATO), and integrating security practices into cloud infrastructure and software development workflows.The ideal candidate brings hands-on experience with cloud platforms, Python scripting, and container technologies, along with an understanding of cybersecurity compliance and vulnerability management.Key ResponsibilitiesSupport security operations across cloud infrastructure and hybrid cloud environments.Implement and maintain security controls for AWS and Azure environments.Develop Python scripts to support security automation and operational efficiency.Support container security across Kubernetes, Docker, Podman, or Rancher environments.Contribute to DevSecOps initiatives and security integration within CI/CD pipelines.Assist with Risk Management Framework (RMF), STIG implementation, and continuous authorization activities.Support vulnerability assessments, security monitoring, and remediation efforts.Work with security tools and technologies to identify and address potential vulnerabilities.Required QualificationsMinimum 2 years of relevant cybersecurity, cloud security, or engineering experience.Knowledge of cloud environments, including AWS and/or Microsoft Azure.Proficiency in Python scripting, automation, or tooling.Hands-on experience with containerization technologies such as Kubernetes, Docker, Podman, or Rancher.Ability to work within classified or sensitive network environments.Active Secret security clearance.Desired QualificationsExperience with software supply-chain security and vulnerability assessments.Familiarity with DevSecOps practices and CI/CD workflows.Understanding of RMF processes and STIG implementation.Experience with Assessment and Authorization (A&A) or Continuous Authorization (cATO).Knowledge of ACAS vulnerability scanning.Familiarity with Splunk for security monitoring and log analysis.Experience with static and dynamic application security testing (SAST/DAST).Knowledge of SonarQube, Fortify, and GitLab CI/CD pipelines.Experience securing Infrastructure-as-a-Service (IaaS) environments.