DevSecOps Engineer – Security Specialist

TISTA Science and Technology Corporation

. Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube .

Posted 11/2/2026full-timeRemote • United StatesMid-LevelSenior💰 $95,546 - $125,875 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in integrating security tools into CI/CD pipelines, including SAST/DAST and vulnerability scanning, while ensuring compliance with federal security standards. Proficient in Ansible hardening and producing ATO evidence, with a strong focus on security QA and remediation tracking.

Highest-signal resume keywords

DevSecOps ExperienceVulnerability Scanning Using ACAS/NessusAnsible Hardening on AWS/Azure/OpenShiftATO Evidence ProductionSecurity QA with Fortify and WASA

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTDASTVulnerability ScanningAnsibleAWSAzureOpenShiftFortifyWASACI/CD Integration

Tools & Technologies

GitHubGitLabJenkinsSonarQubeACASNessus

Certifications & Qualifications

AWS Solutions ArchitectAzure Solutions ArchitectISC2 CISSPRed Hat Certified Specialist in AnsibleCISSPCAPSecurity+

Industry Keywords

Federal SystemsCISA BOD 22-01STIG ComplianceSSPPOA&MControl Documentation

Tech Stack

Tools & technologies

AnsibleAWSAzureCyber SecurityJenkinsOpenShift

About the role

Key responsibilities & impact

Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube
Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift
Run vulnerability scans using ACAS/Nessus
Track remediation and meet CISA BOD 22-01 timelines
Produce and maintain ATO evidence, including SSP sections, POA&Ms and control documentation
Validate controls before release
Run WASA and Fortify scans
Sign off on security release criteria

Requirements

What you’ll need

6+ years of experience
3+ years in DevSecOps or cyber engineering on federal systems
Experience with security tooling in CI/CD pipelines, including SAST/DAST, dependency and container scanning
Experience with vulnerability scanning and remediation tracking using ACAS/Nessus
Ansible hardening and STIG compliance on RHEL and OpenShift
ATO evidence experience, including SSP sections, POA&Ms and control documentation
Security QA experience with Fortify and WASA scans and release security sign-off
Bachelor's degree in computer science, cybersecurity or a related field
One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP
Ability to obtain a Tier 2 / Moderate Risk Public Trust
Ability to obtain a VA PIV credential
Red Hat Certified Specialist in Ansible preferred
Security QA option: CISSP, CAP or Security+

Benefits

Comp & perks

Above industry healthcare benefits
Remote working options
Paid time off
Training/Certification opportunities
Healthcare Savings Account
Flexible Savings Account
Paid life insurance
Short-term disability
Long-term disability
401K match
Tuition reimbursement
Employee Assistance Program
Paid holidays
Military leave
Additional forms of compensation, such as bonuses, may be available for eligible positions