FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cybersecurity Engineer – DevSecOps
Millennium. Support cybersecurity, software assurance, and security engineering activities within a DoD/DoN environment .
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Support cybersecurity, software assurance, and security engineering activities within a DoD/DoN environment
- Integrate cybersecurity throughout the software development and delivery lifecycle
- Conduct code and container vulnerability assessments using DoD scanning tools, DISA STIGs, SRGs, and software assurance tools
- Implement and assess operating system security configurations
- Perform cybersecurity assessments, security audits, and risk analyses
- Apply SAST and DAST testing methodologies throughout the software development lifecycle
- Review and implement cybersecurity policies and security controls within CI/CD pipelines
- Serve as a GitLab security reviewer and approver for merge requests
- Review GitLab SAST, dependency, secret detection, and container scanning results; coordinate remediation and track findings through closure
- Review GitLab security policies, pipeline controls, and protected branch settings
- Provide cybersecurity oversight for containerized workloads using NeuVector
- Collaborate with application and platform teams to investigate findings, tune policies, and document remediation or accepted risks
- Ensure security provisions in system acquisition and program documentation address cybersecurity requirements
- Provide cybersecurity guidance and develop mitigation strategies for DoD information systems
- Prepare RMF artifacts and Memoranda of Agreement with system owners
- Identify and evaluate Common Criteria and NIAP-certified technologies
- Evaluate cybersecurity products and technologies for DoD/DoN compliance
- Collaborate with engineering, development, platform, and program teams
- Support business development through technical interviews, technical documentation, proposal writing, and proposal color reviews
Requirements
What you’ll need- Active Secret clearance
- Bachelor's degree with 8 years of relevant experience, or a high school diploma/equivalent with 13 years of relevant experience
- Experience working within the DoD Risk Management Framework (RMF) and familiarity with DoDI 8510.01
- IAM Level II certification in accordance with DoD 8570.01-M, such as CISSP, GSLC, or CISM
- Experience with DoD cybersecurity requirements, including DISA STIGs and SRGs
- Experience with SAST and DAST software security testing methodologies
- Experience supporting cybersecurity within CI/CD or DevSecOps environments
- Experience with GitLab security tools and processes, including reviewing security scan results and supporting vulnerability remediation
- Located in or near a major U.S. Navy installation
- Comfort with prolonged periods of sitting and working on a computer
- Ability to lift up to 10–15 pounds at a time