DevSecOps Engineer

📋 Description

• Embed Guardrails-as-Code and automated security controls across CI/CD pipelines, including SAST
• Manage secrets, cryptographic code signing, artifact integrity, hardened container images, and
• Triage, track, and remediate security vulnerabilities within defined deadlines, ensuring critical
• Automate security evidence collection to support Continuous Assessment and Authorization (ATO)
• Implement Zero Trust principles, identity and access controls, logging, encryption, network
• Mentor development teams on secure coding and security design practices, including the review and

🎯 Requirements

• 7+ years of experience in IT security or DevSecOps, including at least 4 years integrating
• 3+ years of hands-on experience with pipeline security automation, including SAST/DAST, container
• Strong experience automating infrastructure hardening and configuration compliance with tools such
• Proven knowledge of NIST Risk Management Framework (RMF), Authority to Operate (ATO) processes
• Extensive experience securing AWS, Azure, and VA Enterprise Cloud environments, including IAM
• Strong vulnerability management experience, with the ability to partner directly with development

🎁 Benefits

• Suggested salary range of $161,000–$176,000, with actual compensation based on skills
• Certain positions may be eligible for additional compensation, including bonuses.
• Comprehensive healthcare benefits above industry standards.
• Remote working options for eligible employees.
• Paid time off and paid holidays.
• 401(k) matching.