DevSecOps Secuirty Engineer

This role is open for W2 contract and Fulltime both.

Location: Washington DC, MD; Minneapolis, MN and Atlantic City, NJ---Hybrid

Remote is also considerable.

Job Desc:

What You’ll Do:

• Implement and maintain automated security controls in CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and infrastructure-as-code scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX) to prevent vulnerable or unverified deployments.
• Drive container vulnerability remediation and hardening, including hardened minimal base images and elimination of critical/high findings.
• Implement Kubernetes security controls, including pod security, network policies, RBAC, admission controls, and security context constraints.
• Secure workloads through secrets management, mutual TLS (mTLS), service mesh policies, and Linux/container hardening.
• Build and maintain policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or equivalent tools.
• Produce security evidence supporting authorization and continuous monitoring requirements.
• Partner with platform and application teams to triage vulnerabilities, remediate findings, and support security incident response and root cause analysis.
• Leverage AI-assisted development, automation, and modern engineering practices to improve security, code quality, productivity, and delivery speed.

Core Technical Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field with 4+ years of relevant experience. (additional experience, education and training may be considered in lieu of degree)
• Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments, including pod security, network policies, RBAC, admission controls, and hardened/minimal base images.
• Experience with vulnerability scanning and remediation, using tools such as Nessus, Trivy, Grype, or Qualys, including CVE triage and tracking.
• Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.
• Experience with Git-based workflows and CI/CD tooling, such as GitLab CI, GitHub Actions, or Jenkins.
• Working knowledge of NIST 800-53, automated security evidence, and AWS or Azure cloud security.
• Understanding of network security, including segmentation and default-deny policies.
•  

Preferred / Desired Qualifications:

• Security+ CE, CySA+, or equivalent DoD 8570 IAT Level II certification.
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS)
• Knowledge of software supply chain security, including SLSA, Sigstore/cosign, in-toto, and FIPS 140-3.
• Experience with policy-as-code (OPA/Rego, Kyverno) and infrastructure-as-code security scanning (Terraform, CloudFormation).
• Experience securing Kubernetes/OpenShift environments, including service mesh security (Istio, Linkerd) and security context constraints.
• Experience with GitOps deployment using ArgoCD, Flux, or equivalent.
• Experience in aviation, FAA, or other safety-critical environments.
• Experience with SAFe or large-scale Agile delivery