Secret - Security Automation Engineer

Insight Global; Reston (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Insight Global is seeking a Security Automation Engineer to support a DoW modernization program focused on unified access across a portfolio of production applications. You will build and operate automation pipelines for SBOM generation, vulnerability and container scanning, and policy-as-code gates on every merge, while maintaining STIG-based hardening and secrets management.

The role requires 4+ years in security engineering or DevSecOps, hands-on experience with SBOM tooling and

Qualifications

• Candidate has 4+ years in security engineering or DevSecOps with hands-on scanning, SBOM, and policy-as-code tooling.
• Experience with SBOM generation, vulnerability and container scanning, and policy-as-code gates is required.
• Must have interim secret clearance and experience with compliance tooling.

Responsibilities

• Build and operate the pipeline evidence including SBOM generation, vulnerability and container scanning, and policy-as-code gates.
• Maintain STIG-based hardening and secrets management across environments.

Skills

Security engineering

DevSecOps

Interim Secret Clearance

SBOM generation

Policy-as-code

Tools

Syft

Grype

Conftest

Kyverno

Job description

Job Description

We are seeking a Security Automation Engineer to support a mission-application modernization program that unifies access across a portfolio of production applications: one sign-on, one work surface, and a repeatable pattern for onboarding applications to a shared platform, while the existing applications continue to run and are sustained by the same team, for a Department of War (DoW) customer. Compliance automation:-Build and operate the pipeline evidence: SBOM generation, vulnerability and container scanning, policy-as-code gates, and OSCAL artifact generation on every merge.-Maintain STIG-based hardening and secrets management across environments.

Skills and Requirements

• Minimum Interim Secret Clearance
• 4+ years in security engineering or DevSecOps with hands-on scanning, SBOM, and policy-as-code tooling.
• Experience with Syft, Grype, Conftest, Kyverno; compliance-trestle

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.