DevSecOps Engineer

Required

• Bachelor’s degree and 10+ years of related experience.
• DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): CCNP Enterprise, GMON, SecurityX / CASP+, CCSP, CISM, CISSO, CISSP-ISSAP, CISSP-ISSEP, Cloud+, CSSLP, FITSP-D, GCIA, GCSA, GDSA, GICSP, GSEC.
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
• Demonstrated experience integrating cybersecurity into Agile SDLC environments.
• Demonstrated hands-on experience with CI/CD pipelines.
• Practical experience implementing DevSecOps and shift-left security practices.
• Experience using automated security testing tools within software development processes.
• Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Knowledge and practical application of DoD STIGs and SRGs.
• Ability to convert security/compliance requirements into specific technical development tasks and controls.
• Understanding of modern application architectures and cloud-native development.