DevSecOps Engineer, Security Specialist

TISTA Science and Technology Corporation

. Integrate SAST/DAST, dependency, container, and secrets scanning into CI/CD pipelines using GitHub, GitLab, Jenkins, and SonarQube .

Posted 11/2/2026full-timeRemote • United StatesMid-LevelSenior💰 $95,546 - $125,875 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in integrating security tools into CI/CD pipelines, hardening infrastructure-as-code with Ansible, and producing ATO evidence. Proficient in vulnerability scanning and remediation tracking, with a strong background in security QA processes.

Highest-signal resume keywords

DevSecOps ExperienceVulnerability ScanningAnsible HardeningSecurity QA ExperienceATO Evidence Production

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAST/DAST IntegrationVulnerability ScanningAnsible HardeningContainer ScanningRemediation TrackingSecurity DocumentationAWS InfrastructureAzure InfrastructureOpenShift ManagementSTIG Compliance

Tools & Technologies

GitHubGitLabJenkinsSonarQubeACASNessusFortifyWASA

Certifications & Qualifications

AWS Solutions ArchitectAzure Solutions ArchitectISC2 CISSPRed Hat Certified Specialist in AnsibleCISSPCAPSecurity+

Industry Keywords

Federal SystemsCISA BOD 22-01ATO EvidenceSSP SectionsPOA&MsControl DocumentationCybersecurity

Tech Stack

Tools & technologies

AnsibleAWSAzureCyber SecurityJenkinsOpenShift

About the role

Key responsibilities & impact

Integrate SAST/DAST, dependency, container, and secrets scanning into CI/CD pipelines using GitHub, GitLab, Jenkins, and SonarQube
Harden infrastructure-as-code and configurations with Ansible on AWS, Azure, and OpenShift
Run ACAS/Nessus vulnerability scans
Track remediation and meet CISA BOD 22-01 timelines
Produce and maintain ATO evidence, including SSP sections, POA&Ms, and control documentation
For the Security QA variant, validate controls before release, run WASA and Fortify scans, and sign off on security release criteria

Requirements

What you’ll need

6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems (Mid / Level II)
Experience with security tooling in CI/CD pipelines, including SAST/DAST, dependency scanning, and container scanning
Experience with vulnerability scanning and remediation tracking using ACAS/Nessus
Ansible hardening and STIG compliance on RHEL and OpenShift
Experience producing ATO evidence, including SSP sections, POA&Ms, and control documentation
Security QA experience with Fortify and WASA scans and release security sign-off
Bachelor's degree in computer science, cybersecurity, or a related field
One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP
Ability to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential
Red Hat Certified Specialist in Ansible preferred
Security QA option: CISSP, CAP, or Security+

Benefits

Comp & perks

Above-industry healthcare benefits
Remote working options
Paid time off
Training/certification opportunities
Healthcare Savings Account (HSA)
Flexible Savings Account (FSA)
Paid life insurance
Short-term disability
Long-term disability
401(k) match
Tuition reimbursement
Employee Assistance Program
Paid holidays
Military leave
Additional compensation such as bonuses may be available for certain positions