Mid-Level Security Engineer at RIVA Solutions, Inc. in Alexandria, VA

POSITION OVERVIEW

This role performs hands-on security analysis, vulnerability testing, and DevSecOps integration work within the RIVA GitLab CI/CD software factory and the USPTO's approximately 4,000-container Kubernetes environment. The Security Engineer operates under the guidance of senior security personnel and is a primary contributor to the AI Artifact Security objective (SOO 4.1.3), embedding automated security gates into the pipeline and ensuring findings flow through the ServiceNow SMP remediation workflow.

CORE RESPONSIBILITIES

• Operate and maintain Wiz Code within the USPTO GitLab CI/CD software factory: configure container image scanning and infrastructure-as-code (IaC) template analysis gates, triage findings, and ensure no code reaches production on a contractor-only path—every enforcement change ships through USPTO's GitLab review gates
• Run Snyk Agent Scan on AI-native artifact types—Markdown prompt files, cursor rules, GitHub Copilot instruction files, and Model Context Protocol (MCP) configuration files—within the GitLab pipeline; triage scan results and route confirmed findings into the ServiceNow SMP remediation queue with appropriate severity tags
• Maintain and tune Kubernetes security posture across the USPTO container estate: configure admission controls, monitor runtime alerts from Wiz Defend, and escalate container-level findings through the defined remediation workflow
• Correlate DSPM findings with Axonius asset context and Tenable vulnerability data to prioritize remediation backlogs; maintain and update the risk-scored source inventory in coordination with the DSPM SME
• Monitor XSIAM and QRadar SIEM telemetry for security events correlated to DSPM findings; triage alerts, update the POA&M, and contribute structured findings to the three-tier evidence chain (operational, compliance, executive reporting)
• Support Netskope FedRAMP High CASB administration: assist with browser-path and SaaS-path DLP policy tuning, investigate policy violations, and document exception requests through the exception register process
• Perform security audits, risk analysis, application-level vulnerability testing, and security code reviews for the DSPM implementation and integrated AI platforms including AWS Bedrock and UGAP API service broker endpoints
• Support ATO (Authority to Operate) documentation, system security plan (SSP) maintenance, and FISMA reporting; contribute security evidence to the compliance reporting and dashboard package
• Participate in Agile sprint ceremonies; contribute to security user stories, acceptance criteria, and definition-of-done security checks within the two-week sprint cadence

MINIMUM QUALIFICATIONS

• Bachelor's degree and 5 years of relevant experience, or Master's degree and 3 years of relevant experience in cybersecurity, information assurance, or a related technical field
• Active CISSP certification (required per USPTO BOSS LCAT qualification)
• Hands-on experience with GitLab CI/CD pipeline security, including SAST/DAST tooling, container image scanning, and IaC security analysis within a DevSecOps software factory
• Working knowledge of Kubernetes security: admission controllers, runtime scanning, container vulnerability management, and RBAC in a multi-cloud environment
• Familiarity with SIEM platforms (XSIAM, QRadar, or equivalent) and ITSM remediation workflows (ServiceNow or equivalent) for security finding triage and POA&M tracking
• Knowledge of NIST SP 800-53 security controls, FedRAMP requirements, and federal ATO processes; ability to produce structured security evidence for compliance reporting
• Scripting and automation skills for security engineering: Python or Bash, Git-based workflows, REST API interaction, GitLab CI YAML pipeline configuration, and the ability to parse and query JSON-formatted findings for triage and reporting

PREFERRED QUALIFICATIONS

• Prior experience with Wiz (Code, Defend, or DSPM), Snyk Agent Scan, or Netskope CASB in a federal or FedRAMP-authorized environment
• Familiarity with Axonius asset management and Tenable vulnerability management as inputs to security risk scoring
• Experience securing AI serving infrastructure—AWS Bedrock, SageMaker, or API gateway brokering patterns—and understanding of AI artifact security risks (prompt injection, MCP configuration exposure)
• Additional certifications such as CKS (Certified Kubernetes Security Specialist), AWS Security Specialty, CEH, OSCP, or CompTIA Security+
• Prior federal civilian agency experience on a cybersecurity, data governance, or DevSecOps program
• Familiarity with policy-as-code and Kubernetes admission control tooling (OPA/Gatekeeper or Kyverno), secrets detection tooling, and SBOM/dependency analysis in CI pipelines