Назад
Company hidden
6 дней назад

DevSecOps Engineer (Cybersecurity)

130 000 - 150 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSecOps Engineer (Cybersecurity): Integrating cybersecurity requirements, automated security testing, and technical controls into Agile SDLC and CI/CD pipelines with an accent on shift-left security, DoD compliance, and cloud-native application architectures. Focus on translating RMF, NIST, STIG, and SRG requirements into development tasks, remediating vulnerabilities, and guiding secure delivery across APIs, microservices, and containerized workloads.

Location: Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA; hybrid schedule with 4 days onsite weekly.

Salary: $130,000–$150,000 annually

Company

hirify.global is a government services and solutions firm providing security compliance, program governance, consulting, and customized solutions for public sector clients.

What you will do

  • Embed cybersecurity engineering, security requirements, and controls into Agile software development, modernization, SDLC, and CI/CD processes.
  • Implement automated security testing and apply DevSecOps and shift-left practices to identify and remediate vulnerabilities earlier.
  • Collaborate with developers, architects, system owners, ISSMs, ISSOs, and Government stakeholders across requirements, design, sprint planning, and lifecycle activities.
  • Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, and SRGs into actionable technical tasks and controls.
  • Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications, including APIs, microservices, and containerized workloads.
  • Manage security-engineering activities across multiple concurrent projects and communicate technical risks, findings, and remediation approaches.

Requirements

  • Bachelor’s degree and 10+ years of related experience.
  • Current DoD Top Secret clearance required and must be maintained.
  • Residence within a commutable distance of Fort Meade, MD or Chambersburg, PA, with 4 onsite days weekly.
  • DoD 8140 Work Role 652 certification through at least one approved credential, including Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, or GSEC.
  • Hands-on experience with cybersecurity integration in Agile SDLC environments, CI/CD pipelines, DevSecOps, shift-left security, and automated security testing.
  • Knowledge of RMF, NIST SP 800-37, NIST SP 800-53, DoD STIGs and SRGs, modern application architectures, and cloud-native development.

Culture & Benefits

  • Medical coverage with three plan options, dental and vision coverage.
  • Personal time off, paid holidays, and paid parental leave.
  • Retirement savings accounts, including Pre-Tax and Roth options.
  • Flexible and dependent care savings accounts, life insurance, and short- and long-term disability coverage.
  • Tuition and training reimbursement, employee assistance program, and telecommuting if available.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →