DevSecOps Engineer

18 days ago

Arlington, VA, USASenior

Responsibilities

Design, implement, and maintain secure DevSecOps and CI/CD pipelines with security integrated throughout the software development lifecycle.
Lead security controls, automation, Infrastructure as Code, cloud security, secure configuration, and deployment-template initiatives.
Integrate automated application, software composition, vulnerability, and container security testing and remediate identified risks.
Conduct security assessments, code reviews, architecture reviews, and risk analyses for applications and infrastructure.
Support containerization, orchestration, cloud, hybrid-environment security, and compliance monitoring.
Support ATO, FISMA, NIST, FedRAMP, STIG, and other federal security compliance activities.
Develop security automation for detection, response, monitoring, reporting, metrics, dashboards, and program-health communications.
Participate in incident response, root cause analysis, and corrective action planning.
Lead security-related technical projects, mentor junior engineers, and provide technical guidance to project teams and stakeholders.
Create technical documentation, architecture diagrams, operational procedures, and security implementation guides.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related field.
At least eight years of progressive experience in information security, cybersecurity engineering, or related disciplines.
At least two years of experience providing technical leadership for information security projects.
Experience supporting DoD information systems, STIG compliance, DevSecOps practices, security automation, vulnerability management, secure software development, and security testing.
Experience with CI/CD platforms such as Azure DevOps, Jenkins, GitLab, GitHub Actions, or similar technologies.
Experience supporting Microsoft Azure, AWS, or Google Cloud Platform environments.
Familiarity with Terraform, Ansible, CloudFormation, or ARM Templates for Infrastructure as Code.
Knowledge of Docker, Kubernetes, and OpenShift containerization and orchestration technologies.
Understanding of the NIST Cybersecurity Framework, NIST 800-53, RMF, FISMA, and related federal security standards.
U.S. citizenship and the ability to obtain the required clearance.
Preferred qualifications include DHS or CISA program experience, Zero Trust and cloud security architecture experience, platform engineering or SRE knowledge, FedRAMP or CDM experience, SIEM and SOAR experience, relevant cybersecurity certifications, and enterprise modernization or infrastructure automation experience.

The company offers meaningful work, growth opportunities, work-life balance, teamwork, and recognition for outstanding effort.
Employees may participate in Lunch & Learn sessions, group activities, and other workplace engagement programs.

201-500 employees