DSOP Cybersecurity Engineer — Secure CI/CD Expert

SAIC; Chantilly (VA); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is seeking a Cybersecurity Engineer (DSOP) in Chantilly, VA, to build and operate secure DSOP pipelines and integrate automated SAST/DAST and SBOM scanning into CI/CD across multi-environment deployments.

You will provide direct support to developers, validate cyber artifacts, and help ensure secure-by-default automation while aligning with RMF/cATO requirements and cross-team collaboration.

Qualifications

• Hands-on experience running automated SAST/DAST/container scans using Fortify, ZAP, Grype/Trivy or similar tools.
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices.
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools).
• Experience supporting secure coding compliance and vulnerability remediation.
• 8140 aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent.

Responsibilities

• Build and operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
• Implement pipeline blocking rules for Critical/High vulnerabilities.
• Integrate cyber validation tasks into CI/CD for multiple environments.
• Produce RMF/cATO-ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs).
• Validate artifact integrity (image signing, checksum enforcement, provenance tracking).
• Provide direct developer enablement: onboarding into DSOP tools, secure coding guidance, WHY-based mentorship.
• Review, categorize, and drive remediation of CWE/CVE findings across DSOPS, Cloud, CE, and CP teams.
• Validate rollback readiness when cyber gates block promotion.
• Partner with Cloud engineers on early pipeline/environment design and promote secure-by-default automation.

Skills

DevSecOps tooling

Secure coding practices

CWE/CVE remediation

Communication

Education

Bachelor's degree + 9+ years

Master's degree + 7+ years

PhD/JD + 4+ years

Tools

Fortify

ZAP

Grype/Trivy

GitLab CI/CD

SBOM/SCA tools

Job description

SAIC is seeking a Cybersecurity Engineer (DSOP) in Chantilly, VA, to build and operate secure DSOP pipelines and integrate automated SAST/DAST and SBOM scanning into CI/CD across multi-environment deployments.

You will provide direct support to developers, validate cyber artifacts, and help ensure secure-by-default automation while aligning with RMF/cATO requirements and cross-team collaboration.