DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and automate security workflows within CI/CD pipelines and compliance operations.

• Minimize manual efforts in vulnerability scan analysis, auditing security inventory, and producing continuous monitoring reports.

• Collaborate with development and platform teams to integrate, automate, and oversee security tool components.

• Develop automation for compliance and ATO artifacts, which include continuous monitoring reports, SPIAs, and mapping NIST control evidence.

• Conduct automated inventory delta analysis and drift detection across cloud accounts.

• Mentor junior and mid-level engineers while educating teams on contemporary security tools.

• Address complex configuration and performance challenges.

• Leverage generative AI engineering tools to enhance security automation, compliance reporting, and IaC scanning workflows.

• Establish standards for securing AWS Cloud and container environments.

• Deploy advanced solutions for system security, logging, and audit correlation.

• Assist in the preparation of technical documentation, processes, and procedures.

⛳️ Requirements

• Over 8 years of relevant experience.

• BA/BS degree with 8+ years of pertinent experience, or an equivalent combination of education and experience.

• Hands-on experience managing security in a DevSecOps pipeline operating under continuous ATO (cATO).

• Proven track record of owning automated security gates, control evidence, and maintaining compliance posture in a live continuous-authorization pipeline.

• Experience in automating compliance workflows, including scan ingestion, finding triage, evidence generation, and continuous monitoring reporting.

• Familiarity with AWS GovCloud Security Hub, Inspector, GuardDuty, and Config.

• Working knowledge of Qualys, CrowdStrike, Nexus/Sonatype, SonarQube, and Datadog.

• Experience in building and scanning Terraform or CloudFormation IaC for security and compliance purposes.

• Understanding of NIST 800-53 or 800-171 control implementation and evidence mapping.

• Knowledge of FedRAMP and IAM.

• Strong proficiency in Python, Bash, or similar scripting for automation.

• Experience in Linux/Unix administration, preferably RHEL or CentOS.

• Active Security+ certification or equivalent DoD 8570/8140 baseline.

• Willingness or capability to mentor junior/mid-level engineers and establish technical consensus.

• Exceptional critical thinking skills and the ability to solve complex security/compliance issues.

• Strong communication and collaboration abilities.

• Dedication to continuous learning, engineering best practices, and process enhancement.

• Travel required is less than 10%.

• US citizenship is required.

• BI Full 6C (T4) public trust is required.

• Currently, no security clearance is needed; however, the ability to obtain no clearance is necessary.

🏝️ Benefits

• Flexible work week.

• Comprehensive packages for health, dental, vision, and wellness.

• 401(k) plan with competitive company matching.

• Funding for advanced certifications.

• Opportunities for higher education.

• Dedicated professional development opportunities.

• Support for internal career mobility.

• Generous paid vacation.

• Floating holidays.

• Paid time off.

• Medical plan options, including some with Health Savings Accounts.

• Dental plan options.

• Vision plan.

• 401(k) pre-tax and post-tax contributions up to IRS annual limits with company matching.

• Paid vacation, sick, and personal time off.

• Paid holidays.

• Paid parental leave.

• Military leave.

• Bereavement leave.

• Jury duty leave.

• 15 days of paid leave per calendar year for new employees.

• 10 paid holidays annually.

• Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.

• Identity verification process utilizing biometrics and artificial intelligence.