DevSecOps Engineer

DevSecOps Engineer

Responsibilities

• Integrate security into DHRA DevSecOps planning, platforms, toolchains, pipelines, and secure software-development activities.
• Configure and support application-security tools in development pipelines and provide outreach on mandated secure-coding practices.
• Analyze application-security findings, including potential false positives, and provide actionable remediation and risk-reduction recommendations.
• Perform application-security reviews and vulnerability assessments and track findings based on risk and impact.
• Evaluate future capabilities that mature pipeline security, accelerate secure release rates, and improve software-security posture.
• Support software supply-chain risk analysis and approved risk-reduction actions under PWS 5.4.3.
• Apply cybersecurity-engineering methods across security requirements, systems analysis and design, security test and evaluation, hardening, vulnerability testing and scanning, and POA&M remediation.

Minimum Qualifications

• Bachelor’s degree and three years of experience.
• Must be U.S. Citizen
• A Secret clearance is required when the assigned duties require classified information or SIPRNet access.

Compensation Range

• The anticipated salary range the Employer reasonably expects to pay for this position is $110,000 to $149,000 annually.