DescriptionDevSecOps EngineerXcelerate Solutions is seeking a DevSecOps Engineer to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R).
Clearance: Active Secret
Location: Alexandria, VA and Seaside, CA
Responsibilities- Integrate security into DHRA DevSecOps planning, platforms, toolchains, pipelines, and secure software-development activities.
- Configure and support application-security tools in development pipelines and provide outreach on mandated secure-coding practices.
- Analyze application-security findings, including potential false positives, and provide actionable remediation and risk-reduction recommendations.
- Perform application-security reviews and vulnerability assessments and track findings based on risk and impact.
- Evaluate future capabilities that mature pipeline security, accelerate secure release rates, and improve software-security posture.
- Support software supply-chain risk analysis and approved risk-reduction actions under PWS 5.4.3.
- Apply cybersecurity-engineering methods across security requirements, systems analysis and design, security test and evaluation, hardening, vulnerability testing and scanning, and POA&M remediation.
Minimum Qualifications- Bachelor's degree and three years of experience.
- Must be U.S. Citizen
- A Secret clearance is required when the assigned duties require classified information or SIPRNet access.
Compensation Range: - The anticipated salary range the Employer reasonably expects to pay for this position is $110,000 to $149,000 annually.