Systems Engineer - Security with Secret

Maania Consultancy Services • Laurel, MD

9d

About The Position

This role focuses on application security within a software development lifecycle, emphasizing cyber resilience, vulnerability assessment, and remediation. The Systems Engineer will work closely with development teams to integrate security practices into CI/CD workflows and ensure the security of software supply chains. A strong understanding of secure coding practices and the ability to communicate technical findings are essential. Experience in regulated environments, particularly classified, defense, aerospace, or government sectors, is highly valued.

Requirements

• Bachelor’s degree in Cybersecurity.
• At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
• Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
• Experience with software supply-chain security, dependency risk, or software-composition analysis.
• Understanding of secure software-development lifecycle practices.
• Ability to clearly document technical findings and communicate them to developers and technical stakeholders.

Nice To Haves

• Experience with GitLab-based development and CI/CD workflows.
• Experience with Artifactory or similar artifact-management platforms.
• Experience with OpenShift, Kubernetes, and containerized application environments.
• Experience with additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
• Experience with secure-code review and remediation verification.
• Experience with application-security testing in disconnected, restricted, or customer-managed environments.
• Experience supporting classified, defense, aerospace, government, or other regulated software environments.
• Experience with collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.

Responsibilities

• Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
• Working directly with software-development teams to resolve security findings.
• Integrating automated security scanning into software-development or CI/CD workflows.
• Clearly documenting technical findings and communicating them to developers and technical stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior