DEVSECOPS Engineer with Security Clearance

Vanguard Management Solutions, Inc.; Arlington (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Vanguard Management Solutions, Inc. is seeking a Mid-Level DevSecOps Engineer to integrate security into the SDLC. You will bridge development, security, and operations to keep cloud infrastructure secure by design and shift-left security into CI/CD pipelines.

The role emphasizes automated security testing, vulnerability triage, IaC with policy-as-code, secret management, and monitoring for compliance. You will collaborate with teams to strengthen security across deployments and participate in

Qualifications

• 3–5 years of professional experience in DevOps, Cloud Engineering, or AppSec roles.
• Hands-on experience with at least one major cloud provider (AWS/Azure/GCP).
• Experience securing containers and orchestration (Docker, Kubernetes).
• Experience with IaC tools: Terraform, OpenTofu, or CloudFormation.
• Active experience with vulnerability scanners such as Snyk, SonarQube, Aqua, Checkmarx, or Trivy.
• Automation scripting: Python, Bash, or Go.
• CI/CD platforms: GitHub Actions, GitLab CI, or Jenkins.

Responsibilities

• Pipeline Automation: Embed and maintain automated security gates (SAST, DAST, SCA) within our existing CI/CD pipelines.
• Vulnerability Triage: Analyze vulnerability scan results, eliminate false positives, and collaborate with developers to remediate real risks.
• Infrastructure as Code: Write and secure cloud infrastructure using IaC frameworks while enforcing policy-as-code rules.
• Secret Management: Implement and manage secure secret, token, and credential storage systems across all deployment environments.
• Compliance & Monitoring: Monitor cloud infrastructure for compliance drift, track audit logs, and configure security alerts.
• Threat Modeling: Participate in architectural security reviews and assist development teams with basic threat modeling.

Skills

DevSecOps

Cloud Security

Automation

CI/CD

Scripting

Docker & Kubernetes

Tools

Terraform

OpenTofu

CloudFormation

Snyk

SonarQube

Aqua Security

Checkmarx

Trivy

GitHub Actions

GitLab CI

Jenkins

Docker

Kubernetes

Job description

JOB DESCRIPTION DevSecOps Engineer (Mid-Level) Position Overview

We are seeking a Mid-Level DevSecOps Engineer with 3 to 5 years of experience to integrate automated security practices directly into our software development lifecycle (SDLC). In this role, you will act as a bridge between development, security, and operations teams to ensure our cloud infrastructure and applications are secure by design. Your primary focus will be implementing "shift-left" security, automating security testing, and maintaining secure, resilient CI/CD pipelines.

Key Responsibilities

• Pipeline Automation: Embed and maintain automated security gates (SAST, DAST, SCA) within our existing CI/CD pipelines.
• Vulnerability Triage: Analyze vulnerability scan results, eliminate false positives, and collaborate with developers to remediate real risks.
• Infrastructure as Code: Write and secure cloud infrastructure using IaC frameworks while enforcing policy-as-code rules.
• Secret Management: Implement and manage secure secret, token, and credential storage systems across all deployment environments.
• Compliance & Monitoring: Monitor cloud infrastructure for compliance drift, track audit logs, and configure security alerts.
• Threat Modeling: Participate in architectural security reviews and assist development teams with basic threat modeling.

Required Qualifications

• Experience: 3–5 years of professional experience in DevOps, Cloud Engineering, or AppSec roles.
• Cloud Infrastructure: Solid hands-on experience managing infrastructure with at least one major cloud provider (AWS, Azure, or GCP).
• Containers & Orchestration: Proven ability to build, secure, and debug Docker containers and Kubernetes workloads.
• IaC Tools: Practical experience writing reusable, secure code with tools like Terraform, OpenTofu, or CloudFormation.
• Security Tooling: Active experience using vulnerability scanners such as Snyk, SonarQube, Aqua Security, Checkmarx, or Trivy. ,
• Automation & Scripting: Competency in writing automation scripts using Python, Bash, or Go.
• CI/CD Platforms: Familiarity with configuring automation pipelines using GitHub Actions, GitLab CI, or Jenkins.

Preferred Qualifications

• Certifications: Holder of (or working toward) certifications like Certified Kubernetes Security Specialist (CKS) or AWS Certified Security - Specialty.
• Network Security: Basic understanding of VPC architecture, IAM roles, firewalls, and WAF configurations.