Secure DevSecOps Engineer: DSOP CI/CD Automation

Saic

Chantilly (VA)

On-site

USD 160,001 - 200,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

SAIC is seeking a Cybersecurity Engineer (DSOP) to build, secure, and run CMCC’s DSOP pipeline. You will integrate automated SAST/DAST and container security, enforce secure gates, and produce cyber evidence for RMF/cATO readiness. Collaboration with Cloud, DSOP, and CP teams is essential to enable secure-by-default CI/CD practices.

You will support developers with secure coding guidance and validate artifacts while ensuring rollback readiness when gates block promotion.

Qualifications

Hands-on experience with automated SAST/DAST and container scans.
Experience documenting mitigations and validating secure coding practices.
Proficiency with DevSecOps tooling and vulnerability remediation.
8140 aligned certifications such as Security+, CISSP, CCSP, CASP+ or equivalent.

Responsibilities

Build, enhance, and operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
Implement pipeline blocking rules for Critical/High vulnerabilities.
Integrate cyber validation tasks into CI/CD for multiple environments.
Produce RMF/cATO-ready cyber evidence and validate artefacts.
Review CWE/CVE findings and drive remediation across DSOPS and CP teams.
Support secure coding compliance and enable developers with guidance.