Platform Security Engineer – DevSecOps

Work Location: McLean, VA (Onsite 3 days per week – Local candidates only)
Employment Type: W2
Pay Rate: Up to $70/hr W2 (Without Benefits)
Security Clearance: Must be eligible to obtain a Secret Clearance
Experience: 5+ Years

Role Overview

We are seeking a Senior Platform Security Engineer with strong expertise in DevSecOps, cybersecurity engineering, and pipeline security automation. The ideal candidate will be responsible for integrating automated security controls, policy-as-code, and continuous compliance into the software development lifecycle (SDLC).

This role will focus on securing mission-critical federal and defense systems by strengthening CI/CD pipelines, automating vulnerability detection, implementing cloud security controls, and ensuring compliance with federal cybersecurity standards.

The candidate should have hands-on experience with AWS, Kubernetes, Terraform, scripting, security automation, and federal compliance frameworks.

Key Responsibilities

• Design, implement, and enhance secure CI/CD pipelines by integrating automated security tools, including SAST, DAST, SCA, and container image vulnerability scanners.

• Configure and optimize security scanning tools by tuning detection thresholds, refining scan rules, reducing false positives, and improving vulnerability remediation workflows.

• Implement security controls and automation across DevSecOps pipelines to support continuous compliance.

• Secure and harden AWS cloud environments and container orchestration platforms, including Kubernetes.

• Develop and maintain automation scripts using Python, TypeScript, or Bash.

• Secure Infrastructure-as-Code (IaC) templates, particularly Terraform, and implement policy-as-code guardrails.

• Enforce automated security validation and compliance checks throughout the software delivery lifecycle.

• Conduct risk assessments and support System Security Plan (SSP) development and continuous Authorization to Operate (ATO) activities.

• Apply federal cybersecurity standards and frameworks, including NIST SP 800-53, RMF, STIGs, and SCAP.

• Collaborate with development, operations, and security teams to improve secure software delivery.

• Monitor CI/CD pipeline activities, identify security anomalies, and support incident response activities.

• Champion Zero Trust security principles and integrate them across the SDLC.

• Leverage AI-assisted development and security tools to improve engineering productivity and security workflows.

Required Qualifications

• 5+ years of cybersecurity engineering experience, including hands-on DevSecOps experience in federal or defense environments.

• Strong understanding of Infrastructure-as-Code (IaC), Configuration-as-Code (CaC), CI/CD pipelines, and SDLC concepts.

• 3+ years of software engineering or automation experience using Python, TypeScript, or Bash.

• 2+ years of experience implementing cybersecurity solutions in AWS cloud environments.

• Hands-on experience securing containerized applications and orchestration platforms, particularly Kubernetes.

• Experience integrating automated security testing tools into CI/CD pipelines:

  • Static Application Security Testing (SAST)

  • Dynamic Application Security Testing (DAST)

  • Software Composition Analysis (SCA)

  • Container Image Vulnerability Scanning

• Experience with Terraform, Infrastructure-as-Code security, and policy-as-code implementation.

• Practical experience with AI-assisted software development tools such as Claude Code, Codex, or Pi.

• Working knowledge of federal cybersecurity and compliance frameworks, including:

  • NIST SP 800-53

  • Risk Management Framework (RMF)

  • eMASS

  • STIG Manager / STIG Viewer

  • SCAP tools

• Knowledge of cybersecurity best practices, threat-based security frameworks, and AI/ML security practices.

• Experience working with Agile methodologies and Change Management processes.

• Ability to obtain a Secret Security Clearance.

• High School Diploma or GED.

Nice-to-Have Qualifications

• Experience reviewing code samples and implementing security listing or exemption processes.

• Experience designing and implementing Zero Trust security solutions within DevSecOps pipelines.

• Experience evaluating cybersecurity tools and determining their suitability for development and production environments.

• Knowledge of Governance, Risk, and Compliance (GRC) engineering practices, including:

  • Policy-as-Code implementation.

  • Automated compliance validation.

  • Continuous control monitoring.

  • Security control mapping (NIST 800-53, RMF, CIS).

  • Automated risk assessments.

  • POA&M management.

  • Audit evidence collection and compliance reporting.

  • Integration of GRC requirements into CI/CD and DevSecOps workflows.

• Excellent verbal communication, technical writing, and documentation skills.

• Existing Secret Security Clearance.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.

• Relevant industry certifications, such as:

  • CompTIA Security+

  • AWS Solutions Architect

  • AWS Certified Security

  • CISSP

Important Submission Requirements

• Candidates must be able to work onsite in McLean, VA, three days per week.

• Local candidates only.

• Candidates must be eligible to obtain a Secret Security Clearance.

• Please include the candidate's expected hourly W2 rate (without benefits) with every submission.

• Maximum rate: $70/hr W2 (without benefits).

Please submit qualified candidates with their updated resume, location, citizenship status, clearance status, and expected W2 hourly rate.