DevSecOps/Cyber Engineer

Job Description

DevSecOps/Cyber Engineer
Work Arrangement: Onsite

Position Overview:
We are seeking a skilled Cyber Engineer to support cloud and container security operations onsite. This role focuses on securing Infrastructure-as-a-Service (IaaS) environments, implementing continuous authorization (cATO), and integrating DevSecOps practices across hybrid cloud platforms. The ideal candidate thrives in a collaborative, fast-paced environment and contributes to both defensive operations and risk management frameworks.

Must Have Qualifications:

• Knowledge of cloud environments (Amazon AWS, Azure)
• Proficiency in Python (scripting, automation, or tooling)
• Containerization concepts with hands-on experience in any of: Kubernetes (K8s), Docker, Podman, Rancher
• Ability to work within classified/sensitive networks

Nice to Have Qualifications:

• Understanding of software supply-chain security and vulnerability assessment
• DevSecOps experience integrating security into CI/CD workflows
• RMF (Risk Management Framework) and STIG implementation experience
• Assessment and Authorization (A&A) or Continuous ATO experience
• Knowledge of ACAS (Assured Compliance Assessment Solution)
• Familiarity with Splunk for log analysis and security monitoring
• Experience in IaaS environments (AWS, Azure, or equivalent)
• Software vulnerability analysis using static/dynamic analysis tools
• Knowledge of SonarQube or Fortify for SAST/DAST
• GitLab CI/CD concepts and pipeline development experience
• Bachelors degree in Computer Science, Computer Engineering, Cybersecurity, or Electrical Engineering

Clearance: Secret