Назад
Company hidden
2 дня назад

DevSecOps Engineer / Security Specialist

95 546 - 125 875$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSecOps Engineer / Security Specialist (DevSecOps/Cybersecurity): Integrating security scanning into CI/CD pipelines and hardening cloud infrastructure with an accent on vulnerability remediation, STIG compliance, and federal security documentation. Focus on producing ATO evidence, validating security controls, and meeting CISA remediation timelines across AWS, Azure, and OpenShift.

Location: Remote, United States

Salary: $95,546–$125,875

Company

hirify.global provides mission-driven information technology and cybersecurity services for federal systems.

What you will do

  • Integrate SAST/DAST, dependency, container, and secrets scanning into CI/CD pipelines using GitHub, GitLab, Jenkins, and SonarQube.
  • Harden infrastructure-as-code and configurations with Ansible across AWS, Azure, and OpenShift.
  • Run ACAS/Nessus vulnerability scans, track remediation, and meet CISA BOD 22-01 timelines.
  • Produce and maintain ATO evidence, including SSP sections, POA&Ms, and control documentation.
  • For the Security QA variant, validate controls before release, run WASA and Fortify scans, and approve security release criteria.

Requirements

  • 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems.
  • Experience with security tooling in CI/CD pipelines, including SAST/DAST, dependency scanning, and container scanning.
  • Experience with vulnerability scanning and remediation tracking using ACAS/Nessus.
  • Bachelor’s degree in computer science, cybersecurity, or a related field.
  • One of the following certifications: AWS or Azure Solutions Architect or Developer, or ISC2 CISSP.
  • Ability to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential.

Nice to have

  • Ansible hardening and STIG compliance on RHEL and OpenShift.
  • Experience preparing ATO evidence, including SSP sections, POA&Ms, and control documentation.
  • For the Security QA option: Fortify and WASA scans and security release sign-off.
  • Red Hat Certified Specialist in Ansible.
  • For the Security QA option: CISSP, CAP, or Security+.

Culture & Benefits

  • Remote working options.
  • Healthcare benefits, Healthcare Savings Account, and Flexible Savings Account.
  • Paid time off, paid holidays, military leave, and paid life insurance.
  • Short-term and long-term disability coverage, 401K match, and tuition reimbursement.
  • Training and certification opportunities, internal mobility, and an Employee Assistance Program.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →