Lead DevSecOps Engineer: Secure CI/CD & Cloud Automation

Socket.dev; Arlington (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Electrosoft Services, LLC is seeking a DevSecOps Engineer to design, implement, and maintain secure CI/CD pipelines across the SDLC. You will integrate security testing (SAST/DAST/SCA) and automate security controls with developers, cybersecurity, and infrastructure teams.

Responsibilities include IaC design, cloud security automation, and risk analyses, working with Azure/AWS/GCP, and familiarity with NIST/FISMA standards. Strong collaboration and leadership are essential.

Qualifications

• Bachelor's degree or higher in a related field.
• 8+ years in information security/cybersecurity engineering.
• Experience with DoD information systems and STIGs compliance.

Responsibilities

• Design, implement, and maintain secure DevSecOps pipelines that integrate security throughout the Software Development Lifecycle (SDLC).
• Lead the implementation of security controls and automation solutions supporting Digital Solution Development, Automation, and Infrastructure Support initiatives.
• Develop and maintain CI/CD pipelines to support rapid and secure software delivery.
• Integrate automated security testing tools, including SAST, DAST, SCA, and container security scanning.
• Collaborate with application developers, architects, cybersecurity personnel, and infrastructure teams to embed security requirements into system designs and development processes.
• Establish and enforce secure coding practices, vulnerability management procedures, and DevSecOps best practices.
• Support cloud security architecture and automation efforts across cloud-hosted and hybrid environments.
• Design and implement Infrastructure as Code (IaC) solutions using modern automation tools and frameworks.
• Conduct security assessments, code reviews, architecture reviews, and risk analyses for applications and infrastructure platforms.
• Monitor, analyze, and remediate security vulnerabilities identified through automated scanning and assessment tools.

Skills

DevSecOps

CI/CD

Cloud security

SAST/DAST/SCA

Terraform

Kubernetes

Docker

OpenShift

NIST 800-53 / FISMA

Security automation

Education

Bachelor's Degree in CS/IT/Cybersecurity/Engineering

Tools

Azure DevOps

Jenkins

GitHub Actions

Job description

Electrosoft Services, LLC is seeking a DevSecOps Engineer to design, implement, and maintain secure CI/CD pipelines across the SDLC. You will integrate security testing (SAST/DAST/SCA) and automate security controls with developers, cybersecurity, and infrastructure teams.

Responsibilities include IaC design, cloud security automation, and risk analyses, working with Azure/AWS/GCP, and familiarity with NIST/FISMA standards. Strong collaboration and leadership are essential.