OverviewTISTA Science and Technology is seeking a DevSecOps Engineer / Security Specialist to join our growing team.
Responsibilities
- Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD (GitHub, GitLab, Jenkins, SonarQube).
- Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift.
- Run vulnerability scans (ACAS/Nessus), track remediation and meet CISA BOD 22-01 timelines.
- Produce and maintain ATO evidence: SSP sections, POA&Ms and control documentation.
- Security QA variant: validate controls before release, run WASA and Fortify scans, and sign off on security release criteria.
Qualifications
- 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems (Mid / Level II).
- Security tooling in CI/CD pipelines (SAST/DAST, dependency and container scanning).
- Vulnerability scanning and remediation tracking (ACAS/Nessus).
Desired Skills:
- Ansible hardening and STIG compliance on RHEL and OpenShift.
- ATO evidence: SSP sections, POA&Ms, control documentation.
- Security QA option: Fortify and WASA scans, release security sign-off.
Education:
- Bachelor's degree in computer science, cybersecurity or a related field.
- One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP.
- Red Hat Certified Specialist in Ansible preferred; Security QA option: CISSP, CAP or Security+.
Clearance:
- Must be able to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential.
Location:
Pay Range:
- The suggested pay for this position ranges from $95,546 to $125,875.
- The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.
- Also, certain positions are eligible for additional forms of compensation, such as bonuses.
- TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/
