2 months ago
Chantilly, VA, USASenior
Responsibilities
- Build, enhance, and operate DSOP security pipeline stages for SAST, DAST, container scanning, and SBOM/SCA.
- Implement pipeline blocking rules for Critical and High vulnerabilities and integrate cyber validation into CI/CD environments.
- Validate application and external artifacts, artifact integrity, image signing, checksums, provenance, and rollback readiness.
- Produce RMF/cATO-ready cyber evidence, including scan results, mitigation records, SBOM/SCA outputs, and logs.
- Review and drive remediation of CWE/CVE findings across DSOP, cloud, CE, and Capability Provider teams.
- Provide developer onboarding, secure coding guidance, mentorship, training, and best-practice workflows.
- Partner with cloud engineers on early pipeline and environment design and promote secure-by-default automation.
Requirements
- Bachelor’s degree and nine or more years of experience, or a master’s degree and seven or more years, or a PhD/JD and four or more years.
- US citizenship.
- Hands-on experience running automated SAST, DAST, and container scans with Fortify, ZAP, Grype, Trivy, or similar tools.
- Experience documenting mitigations, reviewing CWE/CVE outputs, validating secure coding practices, and supporting vulnerability remediation.
- Proficiency with DevSecOps tooling, GitLab CI/CD, container registries, and SBOM/SCA tools.
- An 8140-aligned certification such as Security+, CISSP, CCSP, CASP+, or equivalent.
- Preferred experience with RMF/cATO pipelines, SSP/POA&M updates, secure automation across multiple classification environments, image signing, and pipeline compliance validation.
- Strong communication skills and experience creating developer-focused guidance and training.
Tech Stack
GitLab CI/CD
Categories
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.