Engineer IV, Cyber DevSecOps

Jobtailor; Rockville (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor is seeking a mid-level security/DevOps engineer in Rockville, MD to integrate security into the SDLC and OT environments. You will support secure CI/CD pipelines with SAST/DAST/SCA and infrastructure-as-code scanning, and embed security into system design under senior guidance.

The role emphasizes hands-on security automation, incident response support, and secure coding practices, with 3+ years of DevOps/security experience and relevant certifications preferred.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 3+ years DevOps/security experience.
• 1–2 years DevSecOps experience.
• Security+ or equivalent; Certified DevSecOps Professional (CDP) (Required/Preferred)
• CISSP, CISM, AWS Security Specialty, Azure Security Engineer, or CKS (Preferred/Optional)
• Skills for this role are typically demonstrated by approximately 8–10 years of relevant experience.

Responsibilities

• Provide security engineering support, cyber-informed engineering support, and DevOps lifecycle management from a security perspective as a mid-level (Level IV) engineer.
• Lead the integration of security practices into development and operations workflows leveraging AWS cloud infrastructure and GitLab platforms to ensure security is embedded throughout the SDLC and OT environments.
• Support the design, implementation, and maintenance of secure CI/CD pipelines incorporating security scanning, vulnerability assessment, and compliance validation.
• Integrate security tools and practices into DevOps workflows, including SAST, DAST, SCA, container security, and infrastructure-as-code scanning.
• Contribute to cyber-informed engineering by embedding security requirements into system design, architecture decisions, and operational technology environments under guidance of senior engineers.
• Develop and maintain security automation scripts, tools, and frameworks to enhance detection, response, and remediation capabilities.
• Collaborate with development teams to implement secure coding practices, conduct security code reviews, and provide remediation guidance with moderate independence.
• Support security incident response activities by providing technical expertise in forensic analysis, root cause determination, and remediation implementation.

Skills

Security engineering

DevSecOps

Secure coding

Forensic analysis

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

AWS

GitLab

SAST tools

DAST tools

IaC scanning

Job description

Responsibilities

• Provide security engineering support, cyber-informed engineering support, and DevOps lifecycle management from a security perspective as a mid-level (Level IV) engineer.
• Lead the integration of security practices into development and operations workflows leveraging AWS cloud infrastructure and GitLab platforms to ensure security is embedded throughout the SDLC and OT environments.
• Support the design, implementation, and maintenance of secure CI/CD pipelines incorporating security scanning, vulnerability assessment, and compliance validation.
• Integrate security tools and practices into DevOps workflows, including SAST, DAST, SCA, container security, and infrastructure-as-code scanning.
• Contribute to cyber-informed engineering by embedding security requirements into system design, architecture decisions, and operational technology environments under guidance of senior engineers.
• Develop and maintain security automation scripts, tools, and frameworks to enhance detection, response, and remediation capabilities.
• Collaborate with development teams to implement secure coding practices, conduct security code reviews, and provide remediation guidance with moderate independence.
• Support security incident response activities by providing technical expertise in forensic analysis, root cause determination, and remediation implementation.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or related field
• 3+ years DevOps/security experience
• 1–2 years DevSecOps experience
• Security+ or equivalent; Certified DevSecOps Professional (CDP) (Required/Preferred)
• CISSP, CISM, AWS Security Specialty, Azure Security Engineer, or CKS (Preferred/Optional)
• Skills for this role are typically demonstrated by approximately 8–10 years of relevant experience