DevSecOps Engineer – Security Specialist

TISTA Science and Technology Corporation

. Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube .

Posted 11/2/2026full-timeRemote • United StatesMid-LevelSenior💰 $95,546 - $125,875 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in DevSecOps and cyber engineering, focusing on integrating security practices into CI/CD pipelines using tools like GitHub, GitLab, Jenkins, and SonarQube. Proficient in vulnerability scanning, remediation tracking, and producing ATO evidence while ensuring compliance with security standards.

Highest-signal resume keywords

DevSecOps ExperienceVulnerability ScanningAnsible HardeningSecurity QA with FortifyCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAST/DAST ScanningVulnerability Remediation TrackingInfrastructure-as-Code HardeningContainer ScanningSecrets ScanningACAS/Nessus ScanningATO Evidence ProductionSTIG ComplianceSecurity Control ValidationRelease Security Sign-off

Tools & Technologies

GitHubGitLabJenkinsSonarQubeAWSAzureOpenShiftFortifyWASAAnsible

Certifications & Qualifications

AWS Solutions ArchitectAzure Solutions ArchitectISC2 CISSPRed Hat Certified Specialist in AnsibleCISSPCAPSecurity+

Industry Keywords

Federal SystemsCISA BOD 22-01SSPPOA&MsControl DocumentationSecurity ControlsModerate Risk Public TrustVA PIV Credential

Tech Stack

Tools & technologies

AnsibleAWSAzureCyber SecurityJenkinsOpenShift

About the role

Key responsibilities & impact

Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD using GitHub, GitLab, Jenkins and SonarQube
Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift
Run ACAS/Nessus vulnerability scans
Track vulnerability remediation and meet CISA BOD 22-01 timelines
Produce and maintain ATO evidence, including SSP sections, POA&Ms and control documentation
Validate security controls before release
Run WASA and Fortify scans
Sign off on security release criteria

Requirements

What you’ll need

6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems
Experience with SAST/DAST, dependency, container and secrets scanning in CI/CD pipelines
Experience with GitHub, GitLab, Jenkins and SonarQube
Experience with vulnerability scanning and remediation tracking using ACAS/Nessus
Ansible hardening and STIG compliance on RHEL and OpenShift
Experience producing ATO evidence, including SSP sections, POA&Ms and control documentation
Security QA experience with Fortify and WASA scans and release security sign-off
Bachelor's degree in computer science, cybersecurity or a related field
One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP
Red Hat Certified Specialist in Ansible preferred
Security QA option: CISSP, CAP or Security+
Must be able to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential

Benefits

Comp & perks

Above industry healthcare benefits
Remote working options
Paid time off
Training/certification opportunities
Healthcare Savings Account
Flexible Savings Account
Paid life insurance
Short-term disability
Long-term disability
401K match
Tuition reimbursement
Employee Assistance Program
Paid holidays
Military leave
Additional forms of compensation such as bonuses may be available for certain positions