DevSecOps Engineer – Security Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Integrate SAST/DAST, dependency, container, and secrets scanning into CI/CD using GitHub, GitLab, Jenkins, and SonarQube

• Strengthen infrastructure-as-code and configurations with Ansible on AWS, Azure, and OpenShift

• Conduct vulnerability scans utilizing ACAS/Nessus

• Monitor remediation efforts and adhere to CISA BOD 22-01 timelines

• Generate and maintain ATO evidence, including SSP sections, POA&Ms, and control documentation

• For the Security QA variant, validate controls prior to release

• Execute WASA and Fortify scans

• Approve security release criteria

⛳️ Requirements

• 6+ years of experience, with at least 3+ years in DevSecOps or cyber engineering within federal systems (Mid / Level II)

• Familiarity with security tools in CI/CD pipelines, including SAST/DAST, dependency, and container scanning

• Proficient with vulnerability scanning and remediation tracking using ACAS/Nessus

• Bachelor's degree in computer science, cybersecurity, or a related discipline

• One of the following: AWS or Azure Solutions Architect or Developer; ISC2 CISSP

• Ability to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential

• Experience with Ansible hardening and STIG compliance on RHEL and OpenShift

• Knowledge of ATO evidence: SSP sections, POA&Ms, control documentation

• Security QA option: Proficiency in Fortify and WASA scans, release security sign-off

• Red Hat Certified Specialist in Ansible is preferred

• Security QA option: CISSP, CAP, or Security+ certifications

🏝️ Benefits

• Above industry-standard healthcare benefits

• Options for remote work

• Paid time off

• Opportunities for training and certification

• Healthcare Savings Account

• Flexible Savings Account

• Paid life insurance

• Short-term disability coverage

• Long-term disability coverage

• 401K matching

• Tuition reimbursement

• Employee Assistance Program

• Paid holidays

• Military leave

• Additional forms of compensation, such as bonuses, may be available for eligible positions