Lead DevSecOps Engineer

Electrosoft; Arlington (VA); On-site; USD 130,000 - 190,000; Full time

Job summary

Electrosoft is seeking a senior security engineer to design, implement, and maintain secure DevSecOps pipelines across SDLC. You will lead security controls, automation, and integrity of CI/CD for rapid, secure software delivery.

You will integrate SAST/DAST/SCA, collaborate with developers and cybersecurity teams, and ensure cloud security, IaC, and compliance with NIST, FISMA, and FedRAMP where applicable. This role requires U.S. citizenship and ability to obtain clearance.

Qualifications

• Bachelor’s Degree in Computer Science, IT, Cybersecurity, Computer Engineering, or related field.
• 8+ years in information security/cybersecurity engineering with 2+ years leading security projects.
• Experience supporting DoD information systems and STIG compliance.
• Automation scripts and IaC templates to enforce STIG configurations.
• DevSecOps practices within Agile/CI/CD environments.
• Security automation tools and vulnerability management platforms.
• CI/CD platforms such as Azure DevOps, Jenkins, GitHub Actions, etc.
• Cloud environments (Azure, AWS, GCP).
• IaC tech like Terraform/Ansible/CloudFormation/ARM.
• Containerization tech (Docker, Kubernetes, OpenShift).
• Strong knowledge of NIST, RMF, FISMA; security standards.

Responsibilities

• Design, implement, and maintain secure DevSecOps pipelines across the SDLC.
• Lead the implementation of security controls and automation for Digital Solution Development and infrastructure.
• Develop and maintain CI/CD pipelines for rapid, secure software delivery.
• Integrate SAST, DAST, SCA, and container security scanning.
• Collaborate with developers, cybersecurity, and infrastructure teams to embed security.
• Enforce secure coding practices, vulnerability management, and DevSecOps best practices.
• Support cloud security architecture across cloud-hosted and hybrid environments.
• Design and implement IaC solutions with modern automation tools.
• Conduct security assessments, code reviews, and risk analyses for apps and infra.

Skills

CI/CD pipelines

Secure coding practices

Security automation

Vulnerability management

SAST/DAST/SCA

Cloud security

Team leadership

Threat modeling

Education

Bachelor’s degree in Computer Science/ IT / Cybersecurity

Tools

Azure DevOps

Jenkins

GitHub Actions

Terraform

Ansible

CloudFormation

ARM Templates

Docker

Kubernetes

OpenShift

Job description

Electrosoft is seeking a senior security engineer to design, implement, and maintain secure DevSecOps pipelines across SDLC. You will lead security controls, automation, and integrity of CI/CD for rapid, secure software delivery.

You will integrate SAST/DAST/SCA, collaborate with developers and cybersecurity teams, and ensure cloud security, IaC, and compliance with NIST, FISMA, and FedRAMP where applicable. This role requires U.S. citizenship and ability to obtain clearance.