28 days ago
Chantilly, VA, USAMid Level / Senior
Responsibilities
- Build, enhance, and operate DSOP cyber pipeline stages for SAST, DAST, container scanning, and SBOM/SCA.
- Implement pipeline blocking rules for Critical and High vulnerabilities and integrate cyber validation into CI/CD environments.
- Validate application and artifact integrity, including image signing, checksum enforcement, and provenance tracking.
- Produce RMF/cATO-ready cyber evidence, including scan results, mitigation records, SBOM/SCA data, and logs.
- Review CWE/CVE findings, drive remediation across DSOPS, Cloud, CE, and Capability Provider teams, and validate rollback readiness.
- Enable developers through tool onboarding, secure coding guidance, training, mentorship, and best-practice workflows.
- Partner with Cloud engineers on early pipeline and environment design and promote secure-by-default automation.
Requirements
- Bachelor’s degree with 9 or more years of experience, master’s degree with 7 or more years, or PhD/JD with 4 or more years.
- US citizenship is required.
- Hands-on experience running automated SAST, DAST, and container scans with Fortify, ZAP, Grype, Trivy, or similar tools.
- Experience documenting mitigations, reviewing CWE/CVE outputs, validating secure coding practices, and supporting vulnerability remediation.
- Proficiency with DevSecOps tooling, GitLab CI/CD, container registries, and SBOM/SCA tools.
- An 8140-aligned certification such as Security+, CISSP, CCSP, CASP+, or equivalent is required.
- Experience with RMF/cATO pipelines, SSP/POA&M updates, multi-classification environments, image signing, pipeline compliance validation, and developer training is desired.
Tech Stack
GitLab CI/CD
Categories
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.