Security-Driven DevSecOps Engineer for CI/CD

Signal Hill Technologies; Fairfax (VA); On-site; USD 150,000 - 185,000; Full time

Benefits offered by this job

Company health plan

401(k) plan with employer match

Paid holidays and paid time off

Job summary

Signal Hill Technologies is seeking a DevSecOps Engineer to embed security across the software lifecycle for government and commercial clients. You will build security into CI/CD pipelines, review code and pipelines, and guide teams to ship secure, resilient systems.

You’ll work across the stack to ensure security is built in, not gated at release, pairing with engineering to deploy secure software and drive DSOMM/ASVS-aligned practices.

Qualifications

• Public Trust eligible (U.S. citizenship or green card) and ability to pass background investigation.
• 6+ years in cybersecurity/DevSecOps with at least 2 years hands-on application security experience.
• Proficiency in DevSecOps concepts, including CI/CD pipelines, Jenkins and/or GitHub Actions, and SAST/DAST integration and automation.
• Scripting proficiency in Python and/or PowerShell.
• Experience with APIs, API security, and databases.
• Strong communication of technical findings to both technical and non-technical audiences.
• Hands-on experience with code analysis and vulnerability scanning tools (Burp Suite or similar).

Responsibilities

• Develop secure software testing and validation procedures for applications in CI/CD pipelines (e.g., Jenkins, GitHub Actions).
• Integrate and tune SAST/DAST tooling within build/release pipelines; validate findings as true positives.
• Perform secure code review and testing to identify and mitigate vulnerabilities per OWASP ASVS/DSOMM.
• Perform risk analysis (threat, vulnerability, probability) for major changes.
• Address security implications across software acceptance, including risk and documentation.
• Prepare security assessment documentation and translate findings into secure coding guidance for stakeholders.
• Consult with engineering to evaluate hardware/software/infrastructure interfaces for security risks.
• Support DevSecOps processes, gate security, and reporting standards.

Skills

CI/CD pipelines

Jenkins

GitHub Actions

SAST/DAST

Python

PowerShell

APIs

Communication

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite

SAST/DAST tooling

Job description

Signal Hill Technologies is seeking a DevSecOps Engineer to embed security across the software lifecycle for government and commercial clients. You will build security into CI/CD pipelines, review code and pipelines, and guide teams to ship secure, resilient systems.

You’ll work across the stack to ensure security is built in, not gated at release, pairing with engineering to deploy secure software and drive DSOMM/ASVS-aligned practices.