DSOP Cybersecurity Engineer: Secure CI/CD & Cloud

Science Applications International Corp.; California; On-site; USD 160,000 - 200,000; Full time

Job summary

Science Applications International Corp. is seeking a seasoned Cybersecurity Engineer (DSOP) to lead secure DevSecOps practices for Air Force programs.

You will build and operate DSOP pipeline stages, enforce secure gates, and provide developer enablement across multi-environment deployments, delivering verifiable cyber evidence for RMF/POA&M processes. The role emphasizes hands-on security tooling, artifact validation, and collaboration with cloud engineers to advance secure-by-default

Qualifications

• Hands-on experience running automated SAST/DAST/container scans using Fortify, ZAP, Grype/Trivy or similar tools.
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices.
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools).
• 8140-aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent.

Responsibilities

• Build, operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
• Implement pipeline blocking rules for Critical/High vulnerabilities.
• Integrate cyber validation tasks into CI/CD for multiple environments.
• Produce RMF/cATO-ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs).
• Validate artifact integrity (image signing, checksum enforcement, provenance tracking).
• Provide direct developer enablement: onboarding into DSOP tools, secure coding guidance, WHY-based mentorship.
• Review, categorize, and drive remediation of CWE/CVE findings across DSOPS, Cloud, CE, and CP teams.
• Validate rollback readiness when cyber gates block promotion.
• Partner with Cloud engineers on early pipeline/environment design and promote secure-by-default automation.

Skills

US Citizenship

SAST/DAST tooling

DevSecOps tooling

CWE/CVE remediation

Security certifications (8140)

Education

Bachelor's degree or higher in CS/Engineering

9+ years experience

Masters/PhD a plus

Tools

Fortify

ZAP

Grype/Trivy

GitLab CI/CD

SBOM/SCA tools

Job description

Science Applications International Corp. is seeking a seasoned Cybersecurity Engineer (DSOP) to lead secure DevSecOps practices for Air Force programs.

You will build and operate DSOP pipeline stages, enforce secure gates, and provide developer enablement across multi-environment deployments, delivering verifiable cyber evidence for RMF/POA&M processes. The role emphasizes hands-on security tooling, artifact validation, and collaboration with cloud engineers to advance secure-by-default