> Markdown version of [/jobs/ext/4679969-platform-security-engineer](https://www.wearedevelopers.com/jobs/ext/4679969-platform-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Security Engineer - **Company:** Kforce Inc. - **Location:** Fairfax County, VA, United States - **Experience:** Experienced - **Contract:** Contract - **Skills:** Agile Methodology, Artificial Intelligence, Amazon Web Services, Bash Shell, Cloud Computing, CompTIA Security+, Cyber Security, Continuous Integration, Python (Programming Language), Systems Development Life Cycle, Zero Trust Network Access, Security Content Automation Protocol, Software Engineering, TypeScript, Software Vulnerability Management, Policy as Code, Cloud Platform System, Claude Code, Software Security, AI Coding Agents, Infrastructure as Code (IaC), Kubernetes, Infrastructure Automation Frameworks, Information Technology, Terraform, Devsecops, Security Orchestration, Automation & Response, Plan of Action and Milestones, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** November 12, 2026 - **Apply:** https://www.dice.com/job-detail/c2b4aa0b-1c0b-4e76-9ebe-cea18a8952f9 ## About the Role We are seeking an experienced Platform Security Engineer to integrate security through cloud infrastructure, software development, and CI/CD pipelines. This role will focus on DevSecOps, AWS cloud security, application security automation, Infrastructure as Code, and continuous compliance within a highly regulated environment. The ideal candidate combines hands-on software engineering and automation skills with strong knowledge of cybersecurity frameworks, vulnerability management, and secure software development practices., * High School diploma or GED * 5+ years of cybersecurity engineering experience, including DevSecOps experience within federal, defense, or similarly regulated environments * 3+ years of software engineering or automation experience using Python, TypeScript, or Bash * 2+ years of experience implementing cybersecurity solutions in AWS and containerized/Kubernetes environments * Strong experience with CI/CD, SDLC, Infrastructure as Code, and Compliance as Code concepts * Experience integrating security testing capabilities such as SAST, DAST, SCA, and container vulnerability scanning * Experience with NIST SP 800-53, Risk Management Framework (RMF), eMASS, STIG Manager, STIG Viewer, and SCAP tools * Experience using Agile and change-management methodologies * Experience with AI-assisted software development tools such as Claude Code, Codex, or Pi * Knowledge of cybersecurity and threat-based security frameworks, including emerging AI/ML security practices * Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information Preferred: * Bachelor's degree in Cybersecurity, Computer Science, or a related technical field * Certifications such as CompTIA Security+, AWS Certified Solutions Architect, AWS Certified Security - Specialty, or CISSP * Experience developing Zero Trust security solutions for DevSecOps pipelines * Experience reviewing source code and managing security listing or exemption processes * Experience evaluating security tools for development and operational environments * Experience with Governance, Risk, and Compliance (GRC) engineering, including: Policy-as-code; Automated compliance validation; Continuous control monitoring; NIST 800-53, RMF, and CIS control mapping; Automated risk assessments; POA&M management; Audit evidence collection; Compliance reporting * Experience integrating GRC requirements directly into CI/CD and DevSecOps workflows ## Description #restonfed, * Design, enhance, and secure DevSecOps and CI/CD pipelines * Integrate and automate application security capabilities, including SAST, DAST, Software Composition Analysis (SCA), and container scanning * Tune vulnerability detection tools, reduce false positives, and improve remediation workflows * Secure and harden Infrastructure as Code (IaC), including Terraform configurations * Implement and maintain policy-as-code and automated compliance controls * Develop security automation using Python, TypeScript, Bash, and related frameworks * Implement cybersecurity solutions within AWS and Kubernetes environments * Conduct security risk assessments and contribute to System Security Plans (SSPs) and continuous ATO activities * Support compliance with NIST SP 800-53, RMF, STIG, and related security requirements * Monitor DevSecOps pipeline activity for security anomalies and assist with incident response * Partner with development, operations, and security teams to embed Zero Trust principles throughout the software development lifecycle * Continuously evaluate security tools and technologies for integration into development and production environments