SecDevOps Engineer - Secure CI/CD, Compliance & Threat Response

Jobtailor; Colorado; On-site; USD 150,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced security-focused DevOps engineer to design, implement, and maintain secure CI/CD pipelines and infrastructure in a federal-contracting environment.

You will integrate security testing, vulnerability scanning, and compliance checks across development workflows while supporting COMSEC operations and government standards. Collaboration with SREs, cybersecurity teams, and developers is essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 8+ years of experience in DevOps, SecDevOps, or a related engineering discipline.
• Proven experience integrating security practices into CI/CD pipelines and development workflows.
• Hands-on experience with SAST, DAST, vulnerability scanners, and SIEM platforms.
• Experience with AWS, Azure, or GCP.
• Experience with Docker and Kubernetes.
• Strong understanding of networking, encryption, and secure communications.
• Familiarity with NIST SP 800-series, RMF, or CMMC security frameworks.
• Active U.S. Security Clearance or ability to obtain one (COMSEC exposure).
• Experience with COMSEC equipment, policies, and key management.
• Relevant certifications such as CISSP, CEH, Security+, or Certified DevSecOps Professional.
• Experience applying NIST SP 800-53 security and privacy controls for federal information systems and organizations.
• Experience in an aerospace, defense, or government contracting environment.
• Familiarity with Terraform or Ansible.

Responsibilities

• Design, implement, and maintain secure DevOps pipelines and infrastructure.
• Integrate automated security testing, vulnerability scanning, and compliance checks into CI/CD workflows.
• Support COMSEC operations by ensuring secure communication systems and tools meet applicable standards.
• Identify and remediate security vulnerabilities across development and production environments.
• Enforce security policies, procedures, and best practices across engineering teams.
• Monitor systems for security threats and respond to incidents with Cybersecurity teams.
• Partner with SREs to build resilient, security-hardened infrastructure.
• Ensure compliance with relevant government and industry security frameworks and regulations.
• Collaborate with Cybersecurity teams, Software Developers, and Site Reliability Engineers.

Skills

DevSecOps

SAST

DAST

Vulnerability Scanning

SIEM

Docker

Kubernetes

Networking

Encryption

NIST RMF

CMMC

CISSP

AWS/Azure/GCP

Terraform

Ansible

COMSEC Equipment

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Docker

Kubernetes

COMSEC Equipment

Terraform

Ansible

Job description

Jobtailor is seeking an experienced security-focused DevOps engineer to design, implement, and maintain secure CI/CD pipelines and infrastructure in a federal-contracting environment.

You will integrate security testing, vulnerability scanning, and compliance checks across development workflows while supporting COMSEC operations and government standards. Collaboration with SREs, cybersecurity teams, and developers is essential.