Cyber Security Engineer

We're hiring on behalf of a Haystack partner!
The Role
• Implement and maintain automated security controls within CI/CD pipelines, including SAST, DAST, software composition analysis, and container scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOMs to prevent vulnerable deployments.
• Drive container vulnerability remediation and hardening, including minimal base images and elimination of critical/high findings.
• Implement Kubernetes security controls such as pod security, network policies, RBAC, and admission controls.
• Secure workloads through secrets management, mutual TLS, service mesh policies, and Linux/container hardening.
• Build and maintain policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or equivalent tools.
What You'll Need
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field with 4+ years of relevant experience.
• Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments, including pod security, network policies, RBAC, and hardened base images.
• Experience with vulnerability scanning and remediation, including CVE triage and tracking.
• Experience with secrets management and security automation using Python, Bash, or Go.
• Experience with Git-based workflows and CI/CD tooling (e.g., GitLab CI, GitHub Actions, Jenkins).
• U.S. citizenship required, with the ability to obtain and maintain a Public Trust investigation.
What's On Offer
• Competitive annual salary ($87,100 - $157,450) plus potential for bonuses.
• Opportunity to work on mission-critical systems supporting national infrastructure.
• Exposure to AI-assisted development and modern engineering practices.
• Comprehensive benefits package including health, wellness, income protection, paid leave, and retirement.
Apply via Haystack today!

Work arrangement
Yes