Senior Engineer
Core
Senior Cybersecurity Engineer ensuring Information Assurance (IA), cybersecurity, and security engineering requirements are incorporated into DevSecOps pipelines, tooling, and software delivery processes for DoD programs.
Role type
Senior IC Cybersecurity Engineer (DevSecOps)
Builds
Automated security controls, secure CI/CD pipelines, and compliant software artifacts for DoD platforms
Domain
Defense technology, Cloud Security, DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
CI/CD pipeline security, container security, Kubernetes security, vulnerability management, security-as-code, policy-as-code, software supply chain security, infrastructure-as-code
Preferred skills
GitLab CI/CD, Argo CD, AWS/GovCloud, DoD cATO environments, IL4/IL5/IL6 environments, Cosign/Sigstore, Kubernetes admission controls, automated compliance evidence collection
Technologies
GitLab, GitLab Runners, Argo CD, Kubernetes, Helm, SOPS, AWS, GovCloud, Platform One, Cosign, Sigstore, Fortify, SonarQube, Trivy, Twistlock, Prisma Cloud, NeuVector, Terraform, Ansible
Responsibilities
Design and maintain automated security controls within CI/CD pipelines; Integrate security tooling for SAST, DAST, SCA, container scanning, and secrets detection; Establish security gates to prevent noncompliant artifacts; Support secure software supply chain practices including SBOM generation and signing; Review Kubernetes and infrastructure-as-code configurations for vulnerabilities; Support vulnerability triage and remediation; Develop security-as-code and policy-as-code approaches; Support DoD RMF, NIST 800-53, and DevSecOps Reference Design compliance; Identify cybersecurity risks in pipeline architecture and recommend mitigations.
Seniority
Senior, hands-on IC