FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
DevSecOps Engineer – Security Specialist
TISTA Science and Technology Corporation. Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in integrating security tools into CI/CD pipelines, including SAST/DAST and vulnerability scanning, while ensuring compliance with federal security standards. Proficient in hardening infrastructure-as-code using Ansible and managing ATO documentation.
Highest-signal resume keywords
DevSecOps ExperienceVulnerability Scanning with ACAS/NessusAnsible HardeningAWS or Azure Solutions Architect CertificationCISSP Certification
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
SASTDASTVulnerability ScanningInfrastructure-as-CodeAnsibleAWSAzureOpenShiftControl DocumentationRemediation Tracking
Tools & Technologies
GitHubGitLabJenkinsSonarQubeFortifyWASAACASNessus
Certifications & Qualifications
AWS Solutions ArchitectAzure Solutions ArchitectISC2 CISSPRed Hat Certified Specialist in AnsibleCAPSecurity+
Industry Keywords
CISA BOD 22-01ATO EvidenceSSP SectionsPOA&MsSTIG ComplianceSecurity QA
Tech Stack
Tools & technologiesAnsibleAWSAzureCyber SecurityJenkinsOpenShift
About the role
Key responsibilities & impact- Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube
- Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift
- Run vulnerability scans using ACAS/Nessus
- Track remediation and meet CISA BOD 22-01 timelines
- Produce and maintain ATO evidence, including SSP sections, POA&Ms and control documentation
- For the Security QA variant, validate controls before release
- Run WASA and Fortify scans
- Sign off on security release criteria
Requirements
What you’ll need- 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems (Mid / Level II)
- Experience with security tooling in CI/CD pipelines, including SAST/DAST, dependency and container scanning
- Experience with vulnerability scanning and remediation tracking using ACAS/Nessus
- Bachelor's degree in computer science, cybersecurity or a related field
- One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP
- Must be able to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential
- Ansible hardening and STIG compliance on RHEL and OpenShift
- ATO evidence: SSP sections, POA&Ms, control documentation
- Security QA option: Fortify and WASA scans, release security sign-off
- Red Hat Certified Specialist in Ansible preferred
- Security QA option: CISSP, CAP or Security+
Benefits
Comp & perks- Above industry healthcare benefits
- Remote working options
- Paid time off
- Training/certification opportunities
- Healthcare Savings Account
- Flexible Savings Account
- Paid life insurance
- Short-term disability
- Long-term disability
- 401K match
- Tuition reimbursement
- Employee Assistance Program
- Paid holidays
- Military leave
- Additional forms of compensation, such as bonuses, may be available for eligible positions