Secret-Cleared DevSecOps Engineer: Secure Pipelines & Risk Reduction

Xcelerate Solutions; United States; On-site; USD 110,000 - 149,000; Full time

Job summary

Xcelerate Solutions, headquartered in McLean, VA, is seeking a DevSecOps Engineer to support DHRA cybersecurity, privacy, records and information management, and related enterprise services. The role requires active Secret clearance, US citizenship, and location flexibility between Alexandria, VA and Seaside, CA.

The position involves integrating security into DevSecOps activities, configuring security tools in pipelines, performing vulnerability assessments, and driving secure-release practices

Responsibilities

• Integrate security into DHRA DevSecOps planning, platforms, toolchains, pipelines and secure software-development activities.
• Configure and support application-security tools in development pipelines and provide outreach on secure-coding practices.
• Analyze application-security findings and provide remediation and risk-reduction recommendations.
• Perform application-security reviews and vulnerability assessments and track findings by risk and impact.
• Evaluate future capabilities to mature pipeline security and improve software-security posture.
• Support software supply-chain risk analysis and approved risk-reduction actions under PWS 5.4.3.
• Apply cybersecurity-engineering methods across security requirements, systems analysis and design, security test and evaluation, hardening, scanning, and POA&M remediation.

Education

Bachelor's degree

Job description

Xcelerate Solutions, headquartered in McLean, VA, is seeking a DevSecOps Engineer to support DHRA cybersecurity, privacy, records and information management, and related enterprise services. The role requires active Secret clearance, US citizenship, and location flexibility between Alexandria, VA and Seaside, CA.

The position involves integrating security into DevSecOps activities, configuring security tools in pipelines, performing vulnerability assessments, and driving secure-release practices