Cybersecurity Engineer - DSOP

SAIC; California; On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC, Beale AFB, CA, is seeking a Cybersecurity Engineer (DSOP) to build and operate a secure DSOP pipeline. You will integrate automated SAST/DAST and SBOM/SCA scanning, enforce secure gates, and support secure-by-default CI/CD across multi-environment deployments.

The role requires hands-on experience with Fortify, ZAP, Grype/Trivy, and GitLab, plus RMF/cATO evidence generation. U.S. citizenship is required and some travel is expected.

Qualifications

• Hands on experience running automated SAST/DAST/container scans.
• Experience documenting mitigations and CWE/CVE outputs.
• Proficiency with DevSecOps tooling and SBOM/SCA workflows.
• Security certifications (e.g., 8140 aligned) are preferred.

Responsibilities

• Build, operate, and enhance DSOP cyber pipeline stages (SAST, DAST, container scanning).
• Implement pipeline blocking rules for critical/high vulnerabilities.
• Integrate cyber validation tasks into CI/CD across environments.
• Provide developer enablement and secure coding guidance.
• Produce RMF/cATO-ready cyber evidence and validate artifact integrity.
• Review CWE/CVE findings and drive remediation across teams.
• Collaborate with Cloud engineers on secure-by-default automation.

Skills

SAST/DAST/Container scanning

Fortify/ZAP/Grype-Trivy

GitLab CI/CD

DevSecOps tooling

Secure coding guidance

Education

Bachelor's degree + 9+ years

Master's degree + 7+ years

PhD/JD + 4+ years

Tools

Fortify

ZAP

Grype

Trivy

SBOM/SCA tools

GitLab CI/CD

Job description

Minimum Clearance Required TS.SCI

Job ID 2616493-OTHLOC-100000685974616

Location

Beale AFB, CA, US

Date Posted

2026-09-03

Category

Software

Subcategory

DevSecOps

Schedule

Full-Time

Shift

Day Job

Travel

Yes - 10% of the time

Minimum Clearance Required TS.SCI

Clearance Level Must Be Able to Obtain

None

Potential for Remote Work

ORA_ON_SITE

Description

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. We bring deep expertise in engineering, securing, and deploying cutting-edge technologies that support mission-critical operations. In partnership with the Assistant Secretary of the Air Force for Acquisition, Technology, and Logistics, SAIC supports programs that unify data, sensors, mission applications, cloud-based services, and emerging AI-enabled automation. These efforts empower warfighters with a decisive edge, transforming complex, multidomain information into fast, clear, and actionable decisions when it matters most. As part of this team, you will help accelerate the integration, testing, security, and transition of new capabilities into operational use. You will work side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This role offers the opportunity to directly shape how the Air Force sees, decides, and acts across all domains-making a tangible and immediate impact on warfighter effectiveness.

The Cybersecurity Engineer (DSOP) builds and operates a secure DSOP pipeline to enable rapid, safe development and onboarding of Capability Provider applications. This role integrates automated SAST/DAST/container security and SBOM/SCA scanning, enforces secure coding gates, validates cyber artifacts, and ensures all pipeline evidence is routed to Infrastructure TO for Operational Baseline updates. The DSOP Engineer provides direct developer support, jointly participates in early DSOP/cloud design, and lays the foundation for secure-by-default CI/CD automation.

Job Duties Include

• Build, enhance, and operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
• Implement pipeline blocking rules for Critical/High vulnerabilities.
• Integrate cyber validation tasks into CI/CD for multiple environments.
• Perform functional validation of CP/External artifacts when possible; deliver validated cyber outputs to Infrastructure TO.
• Produce RMF/cATO-ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs).
• Validate artifact integrity (image signing, checksum enforcement, provenance tracking).
• Provide direct developer enablement onboarding into DSOP tools, secure coding guidance, WHY-based mentorship.
• Review, categorize, and drive remediation of CWE/CVE findings across DSOPS, Cloud, CE, and CP teams.
• Validate rollback readiness when cyber gates block promotion.Partner with Cloud engineers on early pipeline/environment design and promote secure-by-default automation.

Qualifications

• Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more experience.
• US Citizenship.

Required Qualifications & Experience

• Hands on experience running automated SAST/DAST/container scans using Fortify, ZAP, Grype/Trivy or similar tools.
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices.
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools).
• Experience supporting secure coding compliance and vulnerability remediation.
• 8140 aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent.

Desired Qualifications And Experience

• Experience supporting RMF/cATO pipelines-producing cyber evidence, aligning pipeline scans with SSP/POA&M updates.
• Background integrating secure DevSecOps automation across multi classification environments.
• Experience enabling developers by creating training, guidance, and best practice workflows.

Desired Skills And Certifications

• Deep experience with GitLab CI/CD, image signing, SBOM/SCA creation, and pipeline compliance validation.
• Familiarity with secure by design and shift left security principles embedded across DSOP automation.
• Strong communication habits-providing timely vector checks, developer friendly guidance, and clear evidence trails.

Target salary range $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.