DSOP Cybersecurity Engineer: Secure DevSecOps & CI/CD

Saic; California (MO); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is seeking a Cybersecurity Engineer (DSOP) to design, build, and run a secure DSOP pipeline enabling rapid and safe development of Capability Provider apps. You will integrate automated SAST/DAST and SBOM/SCA scanning, enforce secure coding gates, and produce evidence for RMF/cATO readiness.

You will collaborate with Cloud and DSOP teams to validate artifacts, ensure rollback readiness, and mentor developers on secure engineering practices.

Qualifications

• Hands on experience running automated SAST/DAST/container scans using Fortify, ZAP, Grype/Trivy or similar tools.
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices.
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools).
• Experience supporting secure coding compliance and vulnerability remediation.
• 8140 aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent.

Responsibilities

• Build, operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
• Implement pipeline blocking rules for Critical/High vulnerabilities.
• Integrate cyber validation tasks into CI/CD for multiple environments.
• Perform functional validation of CP/External artifacts; deliver validated cyber outputs to Infrastructure TO.
• Produce RMF/cATO‑ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs).
• Validate artifact integrity (image signing, checksum enforcement, provenance tracking).
• Provide direct developer enablement: onboarding into DSOP tools, secure coding guidance, WHY‑based mentorship.
• Review, categorize, and drive remediation of CWE/CVE findings across DSOPS, Cloud, CE, and CP teams.
• Validate rollback readiness when cyber gates block promotion.
• Partner with Cloud engineers on early pipeline/environment design and promote secure‑by-default automation.

Skills

SAST/DAST tooling

DevSecOps tooling

Secure coding

Cybersecurity certifications (8140)

Vulnerability remediation

Education

Bachelor's degree + 9+ years

Master's degree + 7+ years

PhD/JD + 4+ years

Tools

Fortify

ZAP

Grype/Trivy

GitLab CI/CD

SBOM/SCA tools

Job description

SAIC is seeking a Cybersecurity Engineer (DSOP) to design, build, and run a secure DSOP pipeline enabling rapid and safe development of Capability Provider apps. You will integrate automated SAST/DAST and SBOM/SCA scanning, enforce secure coding gates, and produce evidence for RMF/cATO readiness.

You will collaborate with Cloud and DSOP teams to validate artifacts, ensure rollback readiness, and mentor developers on secure engineering practices.