Platform Security Engineer

Position Title: Platform Security Engineer

Location: McLean, VA - Hybrid

Clearance Requirements: Secret clearance required or ability to obtain; U.S. Citizens only

Pay Rate: $90.00 per hour

Position Description:

Seneca Resources is seeking a Platform Security Engineer to strengthen secure software delivery across mission-critical systems in a federal or defense environment. This role will apply DevSecOps, cloud security, automation, and secure software development expertise to integrate cybersecurity throughout the software development lifecycle (SDLC).

The Platform Security Engineer will enhance CI/CD pipelines, automate security controls, support continuous Authority to Operate (ATO) activities, and help advance Zero Trust initiatives. The ideal candidate is a hands-on technical professional who can collaborate effectively with development, operations, infrastructure, and security teams.

• Design, implement, and continuously improve secure DevSecOps pipelines for mission-critical applications.
• Integrate and automate security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container scanning, and vulnerability management solutions.
• Tune security scanners, refine vulnerability thresholds, reduce false positives, and optimize remediation workflows.
• Harden Infrastructure as Code (IaC) templates, including Terraform, and implement policy-as-code across cloud and containerized environments.
• Apply secure development practices using Python, TypeScript, Bash, and automation frameworks.
• Implement cybersecurity solutions in AWS and container orchestration platforms such as Kubernetes.
• Conduct risk assessments and support System Security Plans (SSPs), Risk Management Framework (RMF) compliance, and continuous ATO initiatives.
• Support security control mapping, compliance validation, continuous control monitoring, and audit evidence collection.
• Monitor CI/CD pipeline activity for anomalies and assist with cybersecurity incident response.
• Apply Zero Trust principles throughout the SDLC and promote secure software delivery practices.
• Evaluate cybersecurity tools and recommend solutions for development and operational environments.
• Collaborate in Agile teams and follow established change management processes.
• Review code samples and support whitelisting, exemption, and security exception processes.
• Produce clear technical documentation, security assessments, compliance reports, and remediation guidance.

Top Requirements:

• 5+ years of experience in cybersecurity engineering, including DevSecOps experience in federal or defense environments.
• Experience with Infrastructure as Code (IaC), Configuration as Code (CaC), CI/CD pipelines, and SDLC security.
• 3+ years of software engineering experience using Python, TypeScript, or Bash, along with automation frameworks.
• 2+ years of experience implementing cybersecurity solutions in AWS and container orchestration environments such as Kubernetes.
• Experience integrating security tools such as SAST, DAST, SCA, container scanning, and vulnerability management platforms into CI/CD pipelines.
• Knowledge of cybersecurity and threat-based frameworks, including AI/ML security best practices.
• Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
• Experience with Agile and change management methodologies.
• Ability to obtain and maintain a Secret clearance.
• High school diploma or GED.
• Preferred: Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Preferred certifications: Security+, AWS Solutions Architect, AWS Security, or CISSP.
• Preferred experience with AI software development tools, including Claude Code, Codex, or Pi.
• Preferred experience developing Zero Trust security solutions for DevSecOps pipelines.
• Preferred knowledge of Governance, Risk, and Compliance (GRC) engineering, including policy-as-code, automated compliance validation, continuous control monitoring, POA&M management, risk assessment automation, security control mapping, and compliance reporting.
• Excellent verbal communication, technical writing, documentation, and collaboration skills.

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.

When you work with Seneca, you're choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path. Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.

Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.