Federal Security Specialist DevSecOps & Compliance

BTI; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Job summary

BTI seeks a Security Specialist to lead federal security programs, applying NIST SP 800-53 Moderate baseline, FISMA, and FedRAMP controls. You will develop and maintain SSP/SAR/POA&M and integrate SAST/DAST/IAST into CI/CD pipelines with DevSecOps teams.

You will protect Federal Tax Information and sensitive data per IRS Publication 1075, implement encryption and audit logging, and contribute to incident response and contingency planning across environments.

Qualifications

• Undergraduate degree in Cybersecurity, Computer Science, Information Systems, or related field.
• Security certifications such as CISSP, CISM, or CSSP or equivalent.
• 8+ years of information security experience including FISMA/FedRAMP work.

Responsibilities

• Establish, operate, and monitor security posture per NIST SP 800-53 Moderate baseline, FISMA, and FedRAMP.
• Develop and maintain SSP, SAR, and POA&M tracking; support contingency and incident response planning.
• Integrate SAST/DAST/IAST into CI/CD; triage scans and coordinate remediation with teams.
• Support penetration testing; document findings and validate high-risk vulnerabilities are remediated.
• Protect Federal Tax Information (FTI) per IRS Pub 1075; enforce encryption, access control, and logging.
• Coordinate with development, infra, and AI teams to assess security of new features and AI tools.
• Ongoing monitoring tooling and incident response testing in line with OMB guidance.

Skills

Information security

DevSecOps integration

Security documentation

Cloud security (AWS)

Education

Bachelor's degree in Cybersecurity

Tools

Tenable

Trend Micro

AWS Security Tools

Security Hub

GuardDuty

Snyk

Job description

BTI seeks a Security Specialist to lead federal security programs, applying NIST SP 800-53 Moderate baseline, FISMA, and FedRAMP controls. You will develop and maintain SSP/SAR/POA&M and integrate SAST/DAST/IAST into CI/CD pipelines with DevSecOps teams.

You will protect Federal Tax Information and sensitive data per IRS Publication 1075, implement encryption and audit logging, and contribute to incident response and contingency planning across environments.