DevSecOps Engineer – Junior

asmexternalcareersite; San Antonio (TX); On-site; USD 70,000 - 95,000; Full time

Job summary

ASM Research in San Antonio, TX is seeking a Junior DevSecOps Engineer to support secure CI/CD pipelines in an enterprise environment. You will help automate build, test, and deployment processes while collaborating with development, security, and operations teams.

Responsibilities include designing and maintaining pipelines with Jenkins, GitLab CI, or GitHub Actions; integrating SAST/DAST scanning; IaC automation; and maintaining documentation and metrics for continuous improvement.

Qualifications

• Bachelor’s degree (or equivalent) in IT, Cybersecurity, CS, Information Systems, Data Science, SWE, or related field.
• Typically 1–3 years of DevSecOps, CI/CD, or software engineering experience.
• Foundational experience building or maintaining CI/CD pipelines.
• Familiarity with Infrastructure‑as‑Code concepts and automation scripting.
• Understanding of secure development practices and security scanning in pipelines.
• Must meet DoD 8140 requirements and hold an active Secret clearance.
• U.S. citizenship required.

Responsibilities

• Assist in designing, building, and maintaining CI/CD pipelines using Jenkins, GitLab CI, or GitHub Actions.
• Integrate security scanning tools (SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle.
• Support Infrastructure‑as‑Code practices and automated environment provisioning for consistent development, test, and production environments.
• Implement automated testing and quality gates in pipelines to enforce code security, reliability, and compliance standards.
• Manage source code repositories, branching strategies, and artifact versioning for traceability and controlled releases.
• Monitor pipeline performance, troubleshoot build and deployment issues, and support blue‑green and canary deployments.
• Document DevSecOps processes, pipeline configurations, and operational procedures; contribute to continuous improvement via metrics.
• Collaborate with development, security, and operations teams to optimize secure software delivery per enterprise standards.

Skills

CI/CD

Automation

Security concepts

Scripting

Education

Bachelor’s degree (or equivalent) in IT or related field

Tools

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

Python

Bash

Job description

The DevSecOps Engineer – Junior supports the development and operation of secure DevSecOps pipelines in an enterprise continuous integration and delivery environment. This role assists with integrating security practices throughout the software development lifecycle while maintaining automation pipelines that improve build, test, and deployment reliability. The position works collaboratively with development, security, and operations teams to enhance secure software delivery processes and maintain documentation for pipelines, tooling, and procedures.

Key Responsibilities

• Assist in designing, building, and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions.

• Integrate security scanning tools (e.g., SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle.

• Support Infrastructure‑as‑Code practices and automated environment provisioning to enable consistent and repeatable development, test, and production environments.

• Implement automated testing and quality gates in pipelines to enforce code security, reliability, and compliance standards.

• Manage source code repositories, branching strategies, and artifact versioning to ensure traceability and controlled releases.

• Monitor pipeline performance, troubleshoot build and deployment issues, and support deployment strategies such as blue‑green and canary releases.

• Document DevSecOps processes, pipeline configurations, and operational procedures, and contribute to continuous improvement initiatives using metrics and feedback.

• Collaborate with development, security, and operations teams to optimize secure software delivery practices and maintain alignment with enterprise standards.

Required Qualifications

• Bachelor’s degree (or equivalent experience) in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field.

• Typically 1–3 years of experience in DevSecOps, CI/CD, or software engineering environments.

• Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes.

• Familiarity with Infrastructure‑as‑Code concepts and tools and basic scripting for automation.

• Understanding of secure development practices and security scanning approaches within automated pipelines.

• Must meet DoD 8140 requirements and hold an active Secret clearance.

• U.S. citizenship required.

Preferred Qualifications

• Familiarity with container platforms such as Docker and Kubernetes in support of modern deployment patterns.

• Exposure to security frameworks and compliance standards relevant to enterprise or government environments.

• Experience with scripting languages such as Python or Bash to automate pipeline and administrative tasks.

• Experience supporting deployment strategies such as blue‑green, canary, or rolling deployments.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.