Overview
As a Senior DevSecOps Engineer, you will lead efforts to embed security into every phase of our software development and deployment processes. You will work closely with development, operations, and security teams to design and implement automated security controls, monitor system health, and ensure compliance with government standards.
Key Responsibilities
- Design, implement, and manage CI/CD pipelines with integrated security scanning (SAST, DAST, dependency checks)
- Automate security testing and vulnerability assessments within deployment workflows
- Manage containerized environments using Docker and Kubernetes, ensuring secure configurations
- Develop and maintain infrastructure as code (IaC) using Terraform or Ansible
- Monitor system and application security, responding to incidents and performing root cause analysis
- Ensure compliance with NIST 800-53, RMF, and other relevant frameworks
- Collaborate with cross-functional teams to define and enforce security best practices
- Document processes, procedures, and security architecture
- Stay current with emerging threats, tools, and industry trends