Job Description
DevSecOps/Cyber Engineer
Work Arrangement: Onsite
Position Overview:
We are seeking a skilled Cyber Engineer to support cloud and container security operations onsite. This role focuses on securing Infrastructure-as-a-Service (IaaS) environments, implementing continuous authorization (cATO), and integrating DevSecOps practices across hybrid cloud platforms. The ideal candidate thrives in a collaborative, fast-paced environment and contributes to both defensive operations and risk management frameworks.
Must Have Qualifications:
- Knowledge of cloud environments (Amazon AWS, Azure)
- Proficiency in Python (scripting, automation, or tooling)
- Containerization concepts with hands-on experience in any of: Kubernetes (K8s), Docker, Podman, Rancher
- Ability to work within classified/sensitive networks
Nice to Have Qualifications:
- Understanding of software supply-chain security and vulnerability assessment
- DevSecOps experience integrating security into CI/CD workflows
- RMF (Risk Management Framework) and STIG implementation experience
- Assessment and Authorization (A&A) or Continuous ATO experience
- Knowledge of ACAS (Assured Compliance Assessment Solution)
- Familiarity with Splunk for log analysis and security monitoring
- Experience in IaaS environments (AWS, Azure, or equivalent)
- Software vulnerability analysis using static/dynamic analysis tools
- Knowledge of SonarQube or Fortify for SAST/DAST
- GitLab CI/CD concepts and pipeline development experience
- Bachelors degree in Computer Science, Computer Engineering, Cybersecurity, or Electrical Engineering
Clearance: Secret