DevSecOps Engineer for IBCS: Secure CI/CD & SBOMs

OpenTalent; Huntsville (AL); On-site; USD 110,000 - 140,000; Full time

Job summary

Davidson Technologies in Huntsville, AL seeks a DevSecOps Engineer to integrate cybersecurity into CI/CD for the IBCS program. You will implement static code scanning with Fortify/SonarQube, generate SBOMs, and apply security controls across the SDLC. Collaboration with developers and vendors is essential.

The role requires DoD 8140/8570 certification and hands-on Jenkins automation, plus strong scripting (Python, Bash, PowerShell, Ansible) in a fast-paced agile environment.

Qualifications

• Bachelor's degree in STEM with 5 years cyber systems experience OR master's degree with 3 years cyber systems experience.
• DoD 8140/8570 certification (e.g., Security+ CE) is required.
• Experience implementing DevSecOps lifecycle: continuous build, integration, test, deployment, cyber, monitoring.
• Hands-on Jenkins automation for build, test, and deployment in CI/CD pipelines.
• Experience with source-control systems such as Git, GitLab, GitHub, Bitbucket, Subversion.
• Experience integrating automated code quality and security scanning tools (e.g., SonarQube, Fortify) into CI/CD.
• Ability to collaborate with developers and vendors to diagnose root causes.
• Ability to work in a fast-paced agile environment with customer involvement.
• Scripting/automation skills (Python, Bash, PowerShell, Ansible).
• Experience coordinating across systems engineering, software, and configuration management to support cybersecurity.

Responsibilities

• Implement and integrate static code scanning tools within automated build pipelines to detect vulnerabilities.
• Generate software bill of materials (SBOMs) for visibility into components and dependencies.
• Apply expertise in build automation and CI/CD to implement security controls in the SDLC.
• Prepare and present cybersecurity and systems engineering materials for program reviews and stakeholder discussions.

Skills

DevSecOps

Jenkins

CI/CD

SBOM

Static code analysis

Fortify

SonarQube

Security

Python

Bash

PowerShell

Ansible

Automation

Education

Bachelor's degree in STEM

Master's degree in STEM

Tools

Git

GitLab

GitHub

Bitbucket

Fortify

SonarQube

Job description

Davidson Technologies in Huntsville, AL seeks a DevSecOps Engineer to integrate cybersecurity into CI/CD for the IBCS program. You will implement static code scanning with Fortify/SonarQube, generate SBOMs, and apply security controls across the SDLC. Collaboration with developers and vendors is essential.

The role requires DoD 8140/8570 certification and hands-on Jenkins automation, plus strong scripting (Python, Bash, PowerShell, Ansible) in a fast-paced agile environment.