DevSecOps Engineer — Secure CI/CD & Cloud Automation

United States Digital Space LLC; United States; Remote; USD 115,000 - 125,000; Full time

Job summary

United States Digital Space LLC is seeking a DevSecOps Engineer to weave security into the SDLC within a Scrum framework. You will drive security automation, compliance monitoring, and secure CI/CD pipelines across development teams.

Key responsibilities include vulnerability management, IaC security, and threat modeling, while collaborating with ISSOs and stakeholders to maintain regulatory compliance and secure, resilient applications.

Qualifications

• Required: 4 years of experience + Bachelor’s degree, or 8 years of experience.
• IAT Level II certification required (e.g., Security+ CE, CCNA‑Security, GSEC, GICSP, SSCP, CySA+).
• AWS - Experience with AWS CDK and related processes.
• DevSecOps Expertise — security automation in enterprise environments.
• Scrum Methodology — Agile with security in sprint planning.
• Security Standards Knowledge — STIGs, NIST, ATO; working with ISSOs.
• CI/CD and Automation — GitLab CI; Docker, Kubernetes; Terraform, Ansible, CloudFormation.
• Cloud Security — AWS Security Hub; multi-cloud awareness a plus.
• Programming and Scripting — JavaScript, Bash, PowerShell.
• Security Tools — Nessus, OpenVAS, SAST/DAST, container security tools.
• Communication and Collaboration — cross-functional teamwork in fast-paced settings.

Responsibilities

• Security Integration — embed security controls across the software lifecycle.
• Compliance Management — coordinate with ISSOs for STIGs and ATO processes.
• CI/CD Pipeline Security — secure pipelines with automated tests and checks.
• Scrum Process Participation — attend ceremonies; provide security estimates.
• Vulnerability Management — run scans and coordinate remediation with teams.
• Infrastructure as Code — secure IaC with automated policy enforcement.
• Security Monitoring — deploy and manage monitoring and incident response.
• Risk Assessment — perform threat modeling and architecture reviews.
• Documentation and Training — create security doc and audit artifacts.

Skills

DevSecOps

Security Automation

Scrum

Cloud Security

CI/CD

Programming

Scripting

Communication

Education

Bachelor’s degree

Bachelor’s degree or 8 years experience

Tools

AWS CDK

Terraform

Ansible

CloudFormation

Docker

Kubernetes

GitLab CI

Nessus

SAST/DAST

Job description

United States Digital Space LLC is seeking a DevSecOps Engineer to weave security into the SDLC within a Scrum framework. You will drive security automation, compliance monitoring, and secure CI/CD pipelines across development teams.

Key responsibilities include vulnerability management, IaC security, and threat modeling, while collaborating with ISSOs and stakeholders to maintain regulatory compliance and secure, resilient applications.