DevSecOps Engineer, Security Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Incorporate SAST/DAST, dependency, container, and secrets scanning into CI/CD pipelines utilizing GitHub, GitLab, Jenkins, and SonarQube

• Strengthen infrastructure-as-code and configurations with Ansible on AWS, Azure, and OpenShift

• Conduct ACAS/Nessus vulnerability assessments

• Monitor remediation efforts and adhere to CISA BOD 22-01 deadlines

• Generate and sustain ATO documentation, which includes SSP sections, POA&Ms, and control documentation

• For the Security QA variant, verify controls prior to release, execute WASA and Fortify scans, and authorize security release criteria

⛳️ Requirements

• Over 6 years of experience, including a minimum of 3 years in DevSecOps or cyber engineering within federal systems (Mid / Level II)

• Proficiency with security tools in CI/CD pipelines, including SAST/DAST, dependency scanning, and container scanning

• Experience in vulnerability scanning and remediation tracking utilizing ACAS/Nessus

• Ansible hardening and STIG compliance experience on RHEL and OpenShift

• Proven experience in producing ATO documentation, including SSP sections, POA&Ms, and control documentation

• Security QA experience with Fortify and WASA scans along with security release approval

• Bachelor's degree in computer science, cybersecurity, or a related field

• One of the following certifications: AWS or Azure Solutions Architect or Developer; ISC2 CISSP

• Capability to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential

• Preferred: Red Hat Certified Specialist in Ansible

• For Security QA option: CISSP, CAP, or Security+

🏝️ Benefits

• Comprehensive healthcare benefits above industry standards

• Options for remote work

• Paid time off

• Opportunities for training and certification

• Healthcare Savings Account (HSA)

• Flexible Savings Account (FSA)

• Paid life insurance

• Short-term disability coverage

• Long-term disability coverage

• 401(k) matching

• Tuition reimbursement

• Employee Assistance Program

• Paid holidays

• Military leave

• Additional compensation options, such as bonuses, may be available for specific roles