Remote DevSecOps Security Engineer - CI/CD & Cloud Security

IMR Soft LLC; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Job summary

IMR Soft LLC is seeking a DevSecOps Security Engineer to build and operate automated security controls in L-CAP’s delivery pipeline. You’ll work with platform and application teams to raise security posture while maintaining continuous delivery and producing pipeline evidence for authorization.

You will implement security gates, container vulnerability remediation, and Kubernetes controls, while advancing security automation using AI-enabled practices and modern engineering techniques.

Qualifications

• BS degree in cybersecurity/CS/IT with 4+ years' relevant experience.
• Hands-on experience with SAST/DAST and container scanning in CI/CD.
• Experience securing Kubernetes and container environments.
• Experience with vulnerability scanning tools (Nessus/Trivy/Grype/Qualys).
• Secrets management and automation using Python, Bash, or Go.
• Experience with Git-based workflows and CI/CD tooling.
• Knowledge of NIST 800-53 and cloud security (AWS/Azure).
• US citizenship with ability to obtain Public Trust; FAA facility requirements.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Enforce security gates, artifact signing, and SBOMs to prevent vulnerable deployments.
• Drive container remediation and hardening, including minimal base images.
• Implement Kubernetes security controls (pod security, network policies, RBAC).
• Secure workloads via secrets management, mTLS, service meshes, and hardened images.
• Develop policy-as-code and guardrails using OPA/Rego or Kyverno.
• Produce evidence for authorization and continuous monitoring requirements.
• Triage vulnerabilities and support incident response with platform teams.
• Leverage AI-assisted development to improve security and delivery speed.

Skills

CI/CD security

Kubernetes security

Vulnerability scanning

Secrets management

Git-based workflows

NIST 800-53 & cloud security

Automation in Python/Bash/Go

Public Trust / background clearance

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

HashiCorp Vault

OPA/Rego

Kyverno

GitLab CI

GitHub Actions

Job description

IMR Soft LLC is seeking a DevSecOps Security Engineer to build and operate automated security controls in L-CAP’s delivery pipeline. You’ll work with platform and application teams to raise security posture while maintaining continuous delivery and producing pipeline evidence for authorization.

You will implement security gates, container vulnerability remediation, and Kubernetes controls, while advancing security automation using AI-enabled practices and modern engineering techniques.