Hybrid DevSecOps Security Engineer

Piper Companies; Gaithersburg (MD); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on building and operating automated security controls across modern CI/CD and containerized environments. This is a hybrid position requiring 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The role emphasizes implementing automated security controls in CI/CD, Kubernetes security, vulnerability remediation,

Qualifications

• 4+ years of DevSecOps, cybersecurity, cloud security, or security engineering experience.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field; additional relevant experience may be considered.
• Hands-on experience integrating SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and containerized environments, including RBAC, network policies, and hardened images.
• Experience with vulnerability management tools such as Nessus, Trivy, Grype, or Qualys and CVE remediation.
• Experience with GitLab CI, GitHub Actions, Jenkins, or similar CI/CD platforms.
• Experience with secrets management and automation using Python, Bash, or Go.
• Working knowledge of NIST 800-53 and AWS or Azure cloud security.
• Ability to obtain and maintain a Public Trust and meet government background investigation requirements.

Responsibilities

• Implement automated security controls across CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and IaC scanning.
• Manage security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Identify and remediate container vulnerabilities while developing hardened/minimal base images.
• Implement Kubernetes security controls including RBAC, network policies, pod security, admission controls, and security contexts.
• Support secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or similar technologies.
• Partner with platform and application teams on vulnerability remediation, incident response, and root cause analysis.
• Produce automated security evidence supporting authorization and continuous monitoring requirements.

Skills

SAST

DAST

SCA

Container Scanning

IaC Scanning

Kubernetes Security

RBAC

Secrets Management

Python

Go

NIST 800-53

Education

Bachelor’s degree in Cybersecurity/Computer Science/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Cosign/Sigstore

OPA/Rego

Kyverno

Job description

Zachary Piper Solutions is seeking a DevSecOps Security Engineer to support a government customer focused on building and operating automated security controls across modern CI/CD and containerized environments. This is a hybrid position requiring 3 days onsite and 2 days remote for candidates within commuting distance of Gaithersburg, MD; Eagan, MN; or Egg Harbor Township, NJ.

The role emphasizes implementing automated security controls in CI/CD, Kubernetes security, vulnerability remediation,