DevSecOps Engineer – Junior

ASM Research • Washington, DC

34d

About The Position

The DevSecOps Engineer – Junior supports the development and operation of secure DevSecOps pipelines in an enterprise continuous integration and delivery environment. This role assists with integrating security practices throughout the software development lifecycle while maintaining automation pipelines that improve build, test, and deployment reliability. The position works collaboratively with development, security, and operations teams to enhance secure software delivery processes and maintain documentation for pipelines, tooling, and procedures.

Requirements

• Bachelor’s degree (or equivalent experience) in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field.
• Typically 1–3 years of experience in DevSecOps, CI/CD, or software engineering environments.
• Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes.
• Familiarity with Infrastructure‑as‑Code concepts and tools and basic scripting for automation.
• Understanding of secure development practices and security scanning approaches within automated pipelines.
• Must meet DoD 8140 requirements and hold an active Secret clearance.
• U.S. citizenship required.

Nice To Haves

• Familiarity with container platforms such as Docker and Kubernetes in support of modern deployment patterns.
• Exposure to security frameworks and compliance standards relevant to enterprise or government environments.
• Experience with scripting languages such as Python or Bash to automate pipeline and administrative tasks.
• Experience supporting deployment strategies such as blue‑green, canary, or rolling deployments.

Responsibilities

• Assist in designing, building, and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions.
• Integrate security scanning tools (e.g., SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle.
• Support Infrastructure‑as‑Code practices and automated environment provisioning to enable consistent and repeatable development, test, and production environments.
• Implement automated testing and quality gates in pipelines to enforce code security, reliability, and compliance standards.
• Manage source code repositories, branching strategies, and artifact versioning to ensure traceability and controlled releases.
• Monitor pipeline performance, troubleshoot build and deployment issues, and support deployment strategies such as blue‑green and canary releases.
• Document DevSecOps processes, pipeline configurations, and operational procedures, and contribute to continuous improvement initiatives using metrics and feedback.
• Collaborate with development, security, and operations teams to optimize secure software delivery practices and maintain alignment with enterprise standards.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level