Sr. Cybersecurity / DevSecOps Engineer

External OST Careers • Orlando, FL

6d

About The Position

The Sr. Cybersecurity / DevSecOps Engineer provides cybersecurity engineering and DevSecOps support ensuring TADSS software, systems, and integrated capabilities are designed, developed, tested, deployed, and sustained with security embedded throughout the lifecycle. The individual supports secure, resilient, and compliant delivery of training systems across development, integration, and operational environments. Responsibilities include integrating cybersecurity requirements and controls into system architectures and DevSecOps pipelines; supporting secure software development practices; and implementing automation to enable continuous integration, testing, security scanning, and deployment of TADSS capabilities. The Sr. Cybersecurity / DevSecOps Engineer collaborates with systems engineers, software engineers, test engineers, and acquisition personnel to ensure cybersecurity considerations are incorporated into TADSS design, integration, and modernization efforts. Additional duties include supporting Risk Management Framework (RMF) activities; assisting with system categorization, control implementation, assessment, and authorization artifacts; supporting vulnerability scanning, remediation, and continuous monitoring; and implementing identity, credential, and access management (ICAM) controls. The role supports cybersecurity documentation, security test results, and compliance evidence and assists with security validation during integration, testing, and Government Acceptance Testing (GAT). The Sr. Cybersecurity / DevSecOps Engineer provides technical recommendations to improve system security, automation, and resilience and supports continuous improvement of secure DevSecOps practices across portfolios.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline
• Minimum of 10 years of experience supporting cybersecurity engineering, DevSecOps, or secure system development within a DoD or Federal environment
• Demonstrated experience with Secure software development and DevSecOps pipelines
• Demonstrated experience with CI/CD automation and tooling
• Demonstrated experience with RMF or similar cybersecurity compliance frameworks
• Demonstrated experience with Vulnerability scanning and remediation
• Demonstrated experience with Security monitoring and incident response support
• Demonstrated experience with Collaboration across engineering, test, and acquisition teams
• Experience supporting Army training systems
• Active Secret clearance is required

Nice To Haves

• Familiarity with TADSS architectures and software-intensive training systems
• Familiarity with DevSecOps tools (e.g., Git-based repositories, CI/CD platforms, container security)
• Familiarity with NIST SP 800-series publications and RMF tools
• Certifications such as: Security+, CISSP, CISM, or similar
• Cloud security or DevSecOps certifications

Responsibilities

• Integrate cybersecurity requirements and controls into system architectures and DevSecOps pipelines.
• Support secure software development practices.
• Implement automation to enable continuous integration, testing, security scanning, and deployment of TADSS capabilities.
• Collaborate with systems engineers, software engineers, test engineers, and acquisition personnel to ensure cybersecurity considerations are incorporated into TADSS design, integration, and modernization efforts.
• Support Risk Management Framework (RMF) activities.
• Assist with system categorization, control implementation, assessment, and authorization artifacts.
• Support vulnerability scanning, remediation, and continuous monitoring.
• Implement identity, credential, and access management (ICAM) controls.
• Support cybersecurity documentation, security test results, and compliance evidence.
• Assist with security validation during integration, testing, and Government Acceptance Testing (GAT).
• Provide technical recommendations to improve system security, automation, and resilience.
• Support continuous improvement of secure DevSecOps practices across portfolios.

Benefits

• full benefits
• possible bonus potential based on merit and performance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior