Platform Security Engineer (DevSecOps)

ZipStaff Inc.; McLean (VA); On-site; USD 96,000 - 165,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) + 401(k) matching

Paid time off

Referral Program

Job summary

ZipStaff is hiring a Platform Security Engineer (DevSecOps) in McLean, VA. This W2 contract role focuses on integrating and hardening security across software delivery pipelines for mission-critical federal defense systems, aligning with DoW cybersecurity mandates.

You will drive continuous improvement of the CI/CD ecosystem, implement policy-as-code, and support risk assessments and ATO processes while collaborating with development, operations and security teams to uphold zero trust across the

Qualifications

• 5+ years of cybersecurity engineering, including DevSecOps in federal or defense environments (IaC/CaC, CI/CD, SDLC).
• 3+ years of software engineering with Python, TypeScript or Bash and automation frameworks.
• 2+ years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code or Codex.
• Experience with Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer and SCAP tools, plus AI/ML security best practices.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Responsibilities

• Evolve secure CI/CD pipelines by integrating and automating SAST, DAST, SCA and container scanning tools.
• Tune scanners, refine vulnerability thresholds, reduce false positives and optimize remediation workflows.
• Harden IaC templates (Terraform) and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate with development, operations and security teams; monitor pipelines and support incident response.
• Champion zero trust principles across the SDLC.

Skills

Cybersecurity engineering

DevSecOps

Python

TypeScript

Bash

AWS

Kubernetes

AI tools (Claude/Codex)

Agile methodologies

Change management

Education

HS diploma or GED

Tools

Terraform

eMASS

STIG Manager/Viewer

SCAP tools

Job description

Job Title

Platform Security Engineer (DevSecOps)

Location

McLean, VA

Employment Type

W2 Contract

About the Opportunity

ZipStaff is hiring a Platform Security Engineer for our client, a leading government technology consulting firm. You will integrate and enhance security across software delivery pipelines for mission-critical federal defense systems, ensuring compliance with DoW cybersecurity mandates and driving continuous improvement across the CI/CD ecosystem.

What You’ll Do

• Evolve secure CI/CD pipelines by integrating and automating SAST, DAST, SCA and container scanning tools.
• Tune scanners, refine vulnerability thresholds, reduce false positives and optimize remediation workflows.
• Harden IaC templates (Terraform) and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate with development, operations and security teams; monitor pipelines and support incident response.
• Champion zero trust principles across the SDLC.

Required Qualifications

• 5+ years of cybersecurity engineering, including DevSecOps in federal or defense environments (IaC/CaC, CI/CD, SDLC).
• 3+ years of software engineering with Python, TypeScript or Bash and automation frameworks.
• 2+ years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code or Codex.
• Experience with Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer and SCAP tools, plus AI/ML security best practices.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Nice to Have

• Zero Trust solutions for DevSecOps pipelines and security tool evaluation.
• GRC engineering: policy-as-code, automated compliance validation, continuous control monitoring, POA&M management.
• Active Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Science or related field.
• Security+, AWS Solutions Architect, AWS Security or CISSP certification.

Benefits

• Health Insurance.
• Dental Insurance.
• Vision Insurance.
• 401(k) + 401(k) matching.
• Paid time off.
• Referral Program.

About ZipStaff

ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities.