Your Dream. Our Team.

About Rise8

We’re transforming the United States Government and we know that takes a dream team. 

We believe customer experience starts with employee experience, so we take care of our employees. We offer competitive pay and benefits, invest in employee growth, and offer a culture you can’t find anywhere else.

At Rise8, we continuously achieve unreached heights through next-level tech, and on-the-level collaboration. Together, we create continuous impact. We turn breakdowns into breakthroughs, make small steps into giant leaps, and deliver game-changing products through culture-changing process.

We pair Risers with their customer counterparts and practice pairing at every moment to elevate people and teams and deliver results fast and forever. We work in small teams and rotate between them frequently so that we are able to meet new challenges and explore new ideas.

Our methodology is about experimenting and learning, and our culture is empowering. We subscribe to an ethos of kindness. We make a point to bring empathy to each and every project and are guided by a promise and a purpose: to deploy critical outcomes to prod in order to drive relentless progress. Not just an idea. But an outcome. A better world. A world where every day, fewer bad things happen because of bad software.

Rise8 is certified as a Great Place to Work with 100% of employees saying they love working here.

About You

• Are you a Senior Cybersecurity Engineer with expertise across multiple domains, including cloud security, containerization, secure software supply chain and compliance? Do you thrive in dynamic environments where collaboration, innovation, and secure delivery are top priorities? At Rise8, we’re looking for someone like you to lead the charge in securing complex systems, while ensuring client satisfaction across projects.

As a Senior Cybersecurity Engineer at Rise8, you will: 

• Secure cloud-based environments by designing and implementing native security solutions using services.
• Drive Continuous RMF practices, automating control implementation and reporting through modern methodologies like Continuous Authorization to Operate.
• Automate provisioning and configuration of IT environments 
• Implement and manage security measures like firewalls, IDS/IPS, vulnerability scanning, encryption, and ICAM solutions.
• Secure containerized and large-scale cloud production systems while responding effectively to security incidents.
• Apply advanced security concepts to protect systems, including threats, vulnerabilities, encryption, boundary defense, and risk management.
• Establish and manage identity and access management policies, ensuring least-privilege access and cross-account role adherence.
• Create and maintain engineering artifacts, such as network diagrams, data flow diagrams, installation procedures, and operational manuals.
• Enforce cloud-native security best practices, leveraging frameworks like AWS’s Well-Architected Security Pillar
• Collaborate with cross-functional teams to integrate Zero Trust principles into the broader security posture, aligning with DoD policies such as the Risk Management Framework (RMF)
• Apply and operationalize RMF, FedRAMP, and DISA CC SRG controls, ensuring compliance with DoD Impact Levels.
• Collaborate with cross-functional teams to integrate lean and agile practices into secure development lifecycles.
• Contribute to the continuous improvement of DevSecOps practices, ensuring systems are secure, scalable, and compliant.
• Work in a dynamic, collaborative environment that supports your professional development.

Qualifications 

• A background of 6-10 years of experience in cloud/platform operations or related roles, with a focus on implementing and maintaining secure and compliant systems in diverse environments.
• Must have experience securing CI/CD pipelines using various commercially available tools (i.e. Gitlab)
• Experience with dependency analysis across various software components
• Familiar with SLSA (Supply-chain Levels for Software Artifacts)
• Strong proficiency in securing AWS GovCloud and Azure GCC High environments, including applying security controls, conducting vulnerability scans, and ensuring compliance with DoD standards.
• Expertise in container orchestration, specifically Kubernetes, with a focus on implementing security best practices, ensuring container runtime protection, and automating vulnerability scanning.
• Expertise with monitoring and observability platforms, including integrating security monitoring tools and automating anomaly detection workflows.