Cybersecurity Engineer – DevSecOps

📋 Description

• Conduct code and container vulnerability assessments using approved DoD vulnerability scanning
• Assess operating system security configurations against applicable DISA STIGs, SRGs, and
• Perform cybersecurity assessments, security audits, and risk analyses to identify vulnerabilities
• Apply Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)
• Integrate and assess cybersecurity policies and controls within CI/CD pipelines to support secure
• Serve as a GitLab security reviewer and approver for merge requests, evaluating scan results and

🎯 Requirements

• Active Secret security clearance required.
• Bachelor’s degree with 8 years of relevant experience, or high school diploma/equivalent with 13
• Experience working within the DoD Risk Management Framework (RMF) and familiarity with DoDI 8510.01.
• DoD 8570.01-M Information Assurance Manager (IAM) Level II certification, such as CISSP, GSLC, or
• Strong knowledge of DoD cybersecurity requirements, including DISA STIGs and SRGs.
• Experience with software security testing methodologies, including SAST and DAST.

🎁 Benefits

• Annual compensation range of $125,000–$135,000, with final compensation determined by relevant
• Fully remote work arrangement.
• Opportunity to support cybersecurity and secure software delivery within a DoD/DoN mission
• Hands-on exposure to DevSecOps, application security, CI/CD security, container security
• Opportunity to work with technologies and tools including GitLab, NeuVector, Sonatype, SAST, DAST
• Exposure to Risk Management Framework processes and federal cybersecurity standards.