To support cybersecurity and software assurance within a DoD/DoN environment, the full-time remote Cybersecurity Engineer - DevSecOps will integrate cybersecurity throughout the software development lifecycle, focusing on application security, CI/CD pipeline security, and vulnerability management.
Key responsibilities:
Conduct code and container vulnerability assessments using DoD-approved tools and guidelines
Implement and assess operating system security configurations in accordance with DISA STIGs and SRGs
Perform cybersecurity assessments, security audits, and risk analyses to identify vulnerabilities and compliance gaps
Required qualifications:
Active Secret clearance
Bachelor's degree with 8 years of relevant experience, or a high school diploma/equivalent with 13 years of relevant experience
Experience with DoD Risk Management Framework (RMF) and familiarity with DoDI 8510.01
An Information Assurance Manager (IAM) Level II certification, such as CISSP, GSLC, or CISM
Experience supporting cybersecurity within CI/CD or DevSecOps environments