DevSecOps Engineer- MID
About The Position
Connected Logistics is seeking a Mid-Level DevSecOps Engineer to support the Cybersecurity Architecture and Engineering Services supporting the Department of Veterans Affairs (VA) Office of Information Security (OIS) Cybersecurity Operations Systems Engineering (COSE) program. The Mid-Level DevSecOps Engineer provides specialized cybersecurity and DevSecOps expertise in determining information technology security requirements for mission-critical applications and systems. The role evaluates approved security technologies and capabilities, analyzes security requirements, and develops secure solutions for complex and multilevel security (MLS) environments. The Mid-Level DevSecOps Engineer works with technical and cybersecurity teams to integrate security requirements throughout the system and software development lifecycle. Responsibilities include analyzing organizational mission objectives, technical environments, existing security products, and ongoing security initiatives to identify risks and implement appropriate security controls and technical solutions. The position also performs cybersecurity risk analysis, including risk assessments, and provides day-to-day technical supervision and direction to assigned staff.
Requirements
- Public Trust: T4 or T5 (TS)
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, Risk Management or a related technical discipline or an Associate's degree in the above discipline with an additional 2 years of experience.
- Minimum of five (5) years of relevant professional experience in cybersecurity, information security, DevSecOps, systems security engineering, application security, or a related technical field.
- Demonstrated experience analyzing and defining IT and cybersecurity requirements for applications and systems.
- Experience supporting the design, engineering, or implementation of cybersecurity solutions.
- Experience performing cybersecurity risk analysis and risk assessments.
- Experience evaluating security technologies, products, technical capabilities, and security requirements.
- Working knowledge of secure software development and DevSecOps concepts and practices.
- Ability to analyze complex technical and security information and translate findings into actionable technical requirements and solutions.
- Ability to provide technical direction and day-to-day supervision to assigned personnel.
- Strong technical documentation, communication, analytical, and problem-solving skills.
Nice To Haves
- Experience integrating cybersecurity requirements into CI/CD or DevSecOps environments.
- Experience supporting secure application development, automated security testing, vulnerability management, and remediation.
- Familiarity with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container security, infrastructure security, and related DevSecOps security practices.
- Familiarity with cloud security concepts and securing applications deployed within cloud or hybrid environments.
- Experience working with enterprise cybersecurity architectures and complex mission-critical systems.
- Familiarity with security control implementation, assessment, continuous monitoring, and vulnerability remediation.
- Experience working in federal government, Department of Defense, or other highly regulated IT environments.
- Experience working in Agile and DevSecOps delivery environments.
- Relevant cybersecurity, cloud, or DevSecOps certifications are preferred.
Responsibilities
- Analyze and define cybersecurity requirements for applications, systems, infrastructure, and multilevel security environments.
- Design, develop, engineer, and implement technical solutions that satisfy identified cybersecurity and MLS requirements.
- Integrate security practices and controls throughout DevSecOps pipelines and the system/software development lifecycle.
- Evaluate approved security products, technologies, and capabilities to determine suitability for organizational and mission requirements.
- Gather, analyze, and organize technical information related to organizational mission objectives, operational needs, existing security products, system architectures, and ongoing cybersecurity programs.
- Perform cybersecurity risk analysis, including formal and informal risk assessments, to identify threats, vulnerabilities, security gaps, and potential impacts.
- Support the development and implementation of technical security controls and security engineering solutions.
- Collaborate with development, operations, cybersecurity, architecture, and engineering teams to ensure security requirements are incorporated into system designs and implementations.
- Assist technical teams in identifying and resolving security issues throughout development, integration, testing, deployment, and operations.
- Support secure configuration, vulnerability management, security testing, and remediation activities within DevSecOps environments.
- Develop and maintain technical security documentation, including requirements, risk findings, recommended mitigations, and implementation guidance.
- Provide cybersecurity and DevSecOps subject matter expertise to program leadership, technical teams, and other stakeholders.
- Provide daily technical supervision, task direction, and guidance to assigned staff.
- Monitor assigned technical activities to ensure security requirements, engineering standards, and program objectives are met.
Benefits
- health, dental, vision, life, and disability insurance
- a great 401(k) package
- generous Paid Time Off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
