DevSecOps Engineer - Huntsville, Alabama

Davidson Technologies; Huntsville (AL); On-site; USD 100,000 - 150,000; Full time

Job summary

Davidson Technologies in Huntsville, Alabama seeks a DevSecOps Engineer to support the Integrated Battle Command System (IBCS). The role integrates cybersecurity guidance into DevSecOps in the software development lifecycle to maintain an ATO package for the program.

You will implement static code scanning with Fortify and SonarQube in CI/CD pipelines, generate SBOMs, and strengthen build automation. Must hold DoD 8140/8570 cert and an active DoD Secret clearance; experience with Git, Jenkins,

Qualifications

• Bachelor's degree in STEM with 5 years cyber systems experience or Master's with 3 years.
• DoD 8140/8570 certification (e.g., Security+ CE) required.
• Experience implementing DevSecOps lifecycle - CI/CD pipelines.
• Hands-on Jenkins experience for automating build/test/deploy in CI/CD.
• Experience with Git, GitLab, GitHub, Bitbucket, or Subversion.
• Experience integrating automated code quality and security scanning (SonarQube, Fortify) into CI/CD pipelines.
• Experience working with developers and vendors to diagnose root causes.
• Ability to work in a fast-paced agile environment with customer involvement.
• Scripting/automation skills (Python, Bash, PowerShell, Ansible).
• Experience collaborating with systems engineering, software, and program stakeholders on cybersecurity execution.
• Active DoD Secret clearance required.

Responsibilities

• Implement and integrate static code scanning tools within automated build pipelines to detect vulnerabilities and quality issues.
• Use build tools to generate SBOMs for visibility into components and dependencies.
• Apply build automation and CI/CD expertise to implement security controls in the SDLC.
• Support preparation and presentation of cybersecurity and systems engineering materials for reviews and stakeholder discussions.

Skills

Jenkins

CI/CD pipelines

Python scripting

Bash scripting

PowerShell scripting

Ansible automation

SBOM generation

Fortify

SonarQube

Container security

Education

Bachelor's or Master's in STEM

Tools

Git

GitLab

GitHub

Bitbucket

Subversion

Fortify

SonarQube

SBOM tooling

CI/CD tooling

Job description

Davidson has distinguished itself in the aerospace and missile defense industry with an outstanding reputation for excellence. Specifically, we're recognized for hiring noted experts, experienced engineers and scientists dedicated to designing and delivering advanced, intelligent technology solutions in defense of our Nation.

Davidson Technologies is seeking a DevSecOps Engineer in Huntsville, Alabama to support the Integrated Battle Command System (IBCS) program.

The DevSecOps Engineer will provide support for the Integrated Battle Command System (IBCS) program. The selected candidate will work within the cybersecurity team to integrate cybersecurity guidance into DevSecOps procedures being used to build IBCS software in support of cybersecurity efforts to maintain an ATO package.

Job Responsibilities

• Implement and integrate static code scanning tools, including Fortify and SonarQube, within automated build pipelines to ensure early detection of vulnerabilities and code quality issues.


• Utilize build tools to generate a software bill of materials (SBOMs), enabling comprehensive visibility into software components and dependencies.


• Apply expertise in build automation and CI/CD workflows to implement security controls within the software development lifecycle (SLDC).


• Support preparation and presentation of cybersecurity and systems engineering materials for program reviews, working groups, and stakeholder discussions.

Job Requirements

• Bachelor's degree in STEM field with 5 years of cyber systems experience - OR - master's degree in a STEM field with 3 years of cyber systems experience.


• Must currently possess DoD 8140/8570 certification (e.g., Security+ CE).


• Experience with implementing DevSecOps lifecycle - continuous build, integration, test, deployment, cyber, monitoring.


• Hands-on experience using Jenkins for automating build, test, and deployment processes within CI/CD pipelines.


• Experience with one of the following source-control systems: GIT, GitLab, GitHub, Bitbucket, Subversion.


• Experience integrating automated code quality and security scanning tools (e.g., SonarQube, Fortify) directly into CI/CD pipelines to ensure compliant and secure delivery.


• Experience working with software developers and/or vendors as needed to help diagnose and identify the root cause of problems.


• Ability to work in a fast-paced agile environment with customer involvement.


• Scripting and automation skills (e.g., Python, Bash, PowerShell, Ansible).


• Experience working with systems engineering, software, integration/test, configuration management, and program stakeholders to support cybersecurity execution across the system lifecycle.

Preferred Qualifications

• Experience generating or working with a Software Bill of Materials (SBOM).


• Experience enforcing container security standards and remediating vulnerabilities in container images.

Clearance

• Must have an Active DoD Secret security clearance