DevOps Security Engineer ( US Citizen)

Blue Yonder • Coppell, TX

2d • $90,000 - $120,000 • Hybrid

About The Position

Blue Yonder Defense Solutions is seeking a DevSecOps Engineer to integrate security practices into software development and DevOps processes for product development teams supporting Department of Defense and other government customers. The role works with development, QA, and operations teams to build and maintain secure CI/CD pipelines, automate security testing, and help ensure platforms and applications meet enterprise security standards. The position is hybrid in Dallas, Texas, requires in-office presence, and has no remote option. Applicants must be U.S. citizens with a security clearance or be eligible to obtain one.

The engineer will design and implement pipeline security controls; integrate automated security testing; secure cloud infrastructure, containers, and Kubernetes environments; and develop automation and tooling for security workflows. The role also involves collaborating with engineering and customer security teams, supporting compliance and audits, assisting with vulnerability remediation, and maintaining DevSecOps process documentation.

The advertised base salary range is $90,000–$120,000. The role is eligible for either an annual performance bonus or commission program, depending on the position. Benefits include comprehensive medical, dental, and vision coverage, a 401(k) with matching, flexible time off, a corporate fitness program, and voluntary benefits such as legal plans, accident and hospital indemnity coverage, and pet insurance.

Requirements

• 3–6 years of experience in DevOps, DevSecOps, or security engineering.
• Experience building and maintaining CI/CD pipelines, such as GitHub Actions, Jenkins, or GitLab CI.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Experience with Docker and Kubernetes.
• Understanding of secure software development lifecycle (SSDLC) practices.
• Experience integrating SAST, DAST, SCA, and container vulnerability scanning tools.
• Scripting experience with Python, Bash, or similar.
• Familiarity with Infrastructure-as-Code tools such as Ansible, Terraform, or CloudFormation.
• Ability to work with diverse stakeholders, including business analysts, solution architects, technical managers, developers, QA, and customer IT.
• Excellent verbal and written communication and interpersonal skills.
• Ability to work remotely while embedded in customers’ teams.
• High degree of initiative and ownership, with the ability to take tasks from inception to completion.
• U.S. citizenship and an existing security clearance or eligibility to obtain one.
• Ability to work in-office in the hybrid Dallas role; remote work is not available.

Nice To Haves

• Experience implementing DevSecOps practices in enterprise software environments.
• Knowledge of container and Kubernetes security best practices.
• Experience with secrets management solutions such as Vault, AWS Secrets Manager, or Azure Key Vault.
• Familiarity with security frameworks such as NIST, CIS Benchmarks, and OWASP Top 10.
• Experience supporting government or regulated environments, including FedRAMP or DoD Impact Levels.
• Security certifications such as Security+, CISSP (associate level), or Certified Kubernetes Security Specialist (CKS).

Responsibilities

• Design and implement security controls within CI/CD pipelines to support secure software delivery.
• Integrate automated SAST, DAST, SCA, and container-scanning tools.
• Embed security checks in build and deployment processes to identify vulnerabilities early in the SDLC.
• Work with DevOps teams to secure cloud infrastructure, containers, and Kubernetes environments.
• Implement Infrastructure-as-Code security scanning and policy enforcement.
• Develop automation scripts and integrations for security workflows.
• Maintain and enhance CI/CD platforms and pipeline security tooling.
• Integrate vulnerability management tools with development workflows.
• Partner with developers and QA teams to promote secure coding practices.
• Assist engineering teams in remediating vulnerabilities identified during testing and scanning.
• Collaborate with internal and customer security teams to implement organizational security standards.
• Support security compliance requirements such as SOC 2, FedRAMP, or applicable DoD security standards.
• Assist with security audits and vulnerability remediation tracking.
• Help maintain documentation of DevSecOps processes and controls.

Benefits

• Comprehensive medical, dental, and vision coverage.
• 401(k) with matching.
• Flexible time off.
• Corporate fitness program.
• Voluntary benefits, including legal plans, accident and hospital indemnity coverage, and pet insurance.
• Eligibility for either an annual performance bonus or commission program, depending on the position.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed