Platform Security Engineer (DevSecOps)

ZipStaff • McLean, VA

2d

About The Position

ZipStaff is hiring a Platform Security Engineer for a client described as a leading government technology consulting firm. The role integrates and enhances security across software delivery pipelines for mission-critical federal defense systems, ensuring compliance with DoW cybersecurity mandates and driving continuous improvement across the CI/CD ecosystem.

The engineer will evolve secure CI/CD pipelines by integrating and automating security scanning tools, harden Terraform infrastructure-as-code templates, enforce policy-as-code, contribute to risk assessments and system security plans, and support continuous authorization to operate efforts. The role also involves collaboration with development, operations, and security teams, pipeline monitoring, incident-response support, and championing zero-trust principles across the SDLC.

Requirements

• At least 5 years of cybersecurity engineering experience, including DevSecOps in federal or defense environments and experience with IaC/CaC, CI/CD, and SDLC.
• At least 3 years of software engineering experience using Python, TypeScript, or Bash and automation frameworks.
• At least 2 years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code or Codex.
• Experience with Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer, SCAP tools, and AI/ML security best practices.
• Ability to obtain a Secret clearance.
• High school diploma or GED.

Nice To Haves

• Experience with Zero Trust solutions for DevSecOps pipelines and security tool evaluation.
• GRC engineering experience, including policy-as-code, automated compliance validation, continuous control monitoring, and POA&M management.
• Active Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Security+, AWS Solutions Architect, AWS Security, or CISSP certification.

Responsibilities

• Integrate and automate SAST, DAST, SCA, and container scanning tools in secure CI/CD pipelines.
• Tune scanners, refine vulnerability thresholds, reduce false positives, and optimize remediation workflows.
• Harden Terraform IaC templates and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate with development, operations, and security teams.
• Monitor pipelines and support incident response.
• Champion zero-trust principles across the SDLC.

Benefits

• Health insurance.
• Dental insurance.
• Vision insurance.
• 401(k).
• 401(k) matching.
• Paid time off.
• Referral program.

What This Job Offers

• Career Level: Senior
• Education Level: High school or GED