Mid-Level DevSecOps SME / Cloud Security Engineer (ISSE)
About The Position
Dark Wolf is seeking a Mid-Level DevSecOps SME / Information System Security Engineer (ISSE) to join a collaborative and dynamic team in a fast-paced, innovative mission environment. This role involves close collaboration with the customer team and external satellite software development contractors. The ideal candidate will possess a strong grasp of information security principles, coupled with experience in software development, security engineering, risk management, and compliance. The ability to analyze complex technical issues and devise effective solutions is crucial. This position offers a hybrid work arrangement and can be supported in Colorado Springs, CO or Herndon, VA.
Requirements
- 5+ years of experience in IT security, information assurance, or DevSecOps engineering
- Background in secure software development with a proficiency in a scripting or programming language (e.g., Python, Golang) with an emphasis on automation and a foundational knowledge of how to interact with REST APIs
- Experience and enjoyment in working directly with customers to improve cyber security posture
- Experience authoring and maintaining systems security documentation and hardening configurations for modern cloud environments
- Experience in generating appropriate security documentation to receive proper accreditation from customer security personnel, and correcting security shortfalls as they are identified through customer-sponsored reviews
- Strong understanding of Kubernetes Administration and a deep foundational knowledge of containerization (Docker and similar technologies)
- Understanding of the cyber environment and threats of our cyber adversaries, specifically regarding cloud and supply-chain vulnerabilities
- Possesses strong technical skills and analytic ability
- Bachelor’s Degree in Computer Science, Cyber Security, or a related technical field
- IAT Lvl 2 certification (e.g., Security+)
- US Citizenship and active TS/SCI clearance
Nice To Haves
- Previous experience as an ISSE / ISSM in a DoD or federal environment
- Relevant technical certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), or cloud-specific professional DevOps/Security certifications
Responsibilities
- Conducting technical evaluations of containerized information systems design, cloud architecture (AWS or GCP), and information security aspects and accreditation.
- Performing vulnerability assessments using automated software, pipeline, and container scanning tools including SonarQube, Snyk, NeuVector, and OWASP ZAP.
- Reviewing requests for software installation and conduct technical risk assessments on software implementation, specifically within Kubernetes clustered environments.
- Coordinating and tracking security action requests and report status to senior managers, leveraging GitOps workflows and automation tooling like ArgoCD and GitLab CI/CD.
- Analyzing, modifying when necessary, and maintaining the client’s certification to field security approvals (continuous ATO) by implementing DISA STIGs through automated Ansible Playbooks and hardened Dockerfiles.
- Conducting and analyzing auditing requirements continuously, implementing and monitoring logging, metrics, and tracing stacks via Grafana, Loki, Prometheus, Tempo, and Alloy.
- Enforcing zero-trust network architectures and traffic management within containerized environments using Istio or similar service meshes.
Benefits
- EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
