DevSecOps Engineer

Booz Allen Hamilton; Atlanta (GA); On-site; USD 61,900 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking a DevSecOps Engineer to enhance client IT infrastructures by leveraging cloud technologies and ensuring security through automation. This role requires experience in software development, IT operations, and cybersecurity. Ideal candidates will have cloud platform knowledge and automation skills to meet varied mission requirements.

Qualifications

• 3+ years of experience in relevant fields.
• Ability to obtain and maintain a Public Trust clearance.
• Experience in threat detection, incident response, and using infrastructure-as-code tools.

Responsibilities

• Set up cloud environments and provision networking/storage/virtual networks.
• Support clients in modernizing IT infrastructures.
• Build workflows for CI/CD pipeline automation.

Skills

Software development

IT operations

Cybersecurity

Cloud platforms

Scripting in Python

Education

HS diploma or GED

Tools

SonarQube

Git

Fortify

Scan Central

EDR/XDR tools

SIEM platform

Grafana

Power BI

Job description

Join to apply for the DevSecOps Engineer role at Booz Allen Hamilton

2 days ago Be among the first 25 applicants

Job Number: R0220472

DevSecOps Engineer

The Opportunity:

As a DevOps engineer, you know how to set up cloud environments and provision computer networking, storage, and virtual networks—ultimately, how to “harness the cloud.” We’re looking for a DevOps infrastructure engineer like you to support our clients as they modernize their IT infrastructures and meet their most challenging missions.

You Have:

• 3+ years of experience in software development, IT operations, and cybersecurity roles
• Experience with SonarQube administration and analysis configuration
• Experience implementing custom configurations and automations with Fortify and Scan Central
• Experience with scripting or programming using Python for automation or detection logic
• Knowledge of cloud platforms, such as AWS, Azure, or GCP, and cloud-native security services
• Ability to build workflows in Git in support of CI/CD pipeline automation for security tool integrations in compliance with Agile methodologies
• Ability to perform technical risk assessments, interpret vulnerabilities, and translate findings into actionable engineering fixes
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• HS diploma or GED

Nice If You Have:

• Experience with threat detection and mitigation techniques, including log analysis, TTP mapping, and adversary emulation
• Experience with infrastructure-as-code tools and their use in securing CI/CD pipelines
• Experience in incident response, threat hunting, or red and purple teaming
• Experience with EDR/XDR tools
• Knowledge of containerized environments and securing Kubernetes or other orchestration platforms
• Knowledge of a SIEM platform and associated visualization tools, such as Grafana or Power BI
• Knowledge of security automation frameworks and tools
• Knowledge of healthcare cybersecurity challenges like HIPAA, FISMA, or HHS standards
• Knowledge of security scanning tools such as Falco, Trivy, or Tenable

Vetting:

Applicants will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Compensation

Salary ranges from $61,900 to $141,000 annually, depending on various factors. The posting closes within 90 days from the posting date.

Work Model:

• Remote, hybrid, or onsite options depending on the role, with periodic work at Booz Allen or client sites.

Equal Opportunity:

All qualified applicants will receive consideration without regard to disability, veteran status, or other protected statuses.