Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$96к-126к/год
$120к$140кмедиана$160к
По похожим ролям (48) ~ $140к/год
На СНГ рынке: $3к/мес ($2к - $3.3к)
80
Хорошая вакансия
развернуть
У роли понятный фокус на DevSecOps, актуальные задачи по безопасности и хороший пакет льгот, но требования к опыту работы с федеральными системами и допуску Public Trust сужают круг тех, кому она доступна.
DevSecOps Engineer / Security Specialist (DevSecOps/Cybersecurity): Integrating security scanning into CI/CD pipelines and hardening cloud infrastructure with an accent on vulnerability remediation, STIG compliance, and federal security documentation. Focus on producing ATO evidence, validating security controls, and meeting CISA remediation timelines across AWS, Azure, and OpenShift.
Location: Remote, United States
Salary: $95,546–$125,875
Company
hirify.global provides mission-driven information technology and cybersecurity services for federal systems.
What you will do
Integrate SAST/DAST, dependency, container, and secrets scanning into CI/CD pipelines using GitHub, GitLab, Jenkins, and SonarQube.
Harden infrastructure-as-code and configurations with Ansible across AWS, Azure, and OpenShift.
Run ACAS/Nessus vulnerability scans, track remediation, and meet CISA BOD 22-01 timelines.
Produce and maintain ATO evidence, including SSP sections, POA&Ms, and control documentation.
For the Security QA variant, validate controls before release, run WASA and Fortify scans, and approve security release criteria.
Requirements
6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems.
Experience with security tooling in CI/CD pipelines, including SAST/DAST, dependency scanning, and container scanning.
Experience with vulnerability scanning and remediation tracking using ACAS/Nessus.
Bachelor’s degree in computer science, cybersecurity, or a related field.
One of the following certifications: AWS or Azure Solutions Architect or Developer, or ISC2 CISSP.
Ability to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential.
Nice to have
Ansible hardening and STIG compliance on RHEL and OpenShift.
Experience preparing ATO evidence, including SSP sections, POA&Ms, and control documentation.
For the Security QA option: Fortify and WASA scans and security release sign-off.
Red Hat Certified Specialist in Ansible.
For the Security QA option: CISSP, CAP, or Security+.
Culture & Benefits
Remote working options.
Healthcare benefits, Healthcare Savings Account, and Flexible Savings Account.
Paid time off, paid holidays, military leave, and paid life insurance.
Short-term and long-term disability coverage, 401K match, and tuition reimbursement.
Training and certification opportunities, internal mobility, and an Employee Assistance Program.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →