Security Engineer - DevSecOps & Cloud Security for Apps

Yulista Holding, LLC; Falls Church (VA); On-site; USD 100,000 - 150,000; Full time

Job summary

StraitSys Inc seeks a Security Engineer to provide cybersecurity engineering and technical security support for EOIR's enterprise modernization efforts. You will help design, implement, and test security controls across applications and environments while ensuring compliance with DOJ and Federal requirements.

The role requires collaboration with project teams, management, and government stakeholders to embed secure practices throughout the development lifecycle and incident response activities.

Qualifications

• Bachelor's degree in cybersecurity, information security, or related field and relevant professional experience.
• Experience supporting DOJ/EOIR or Federal agencies is preferred.
• Knowledge of RMF and NIST security controls is desirable.

Responsibilities

• Design, implement, configure, and maintain security controls for applications, systems, and environments.
• Collaborate with architects, developers, admins, and stakeholders to embed security in SDLC.
• Identify and remediate security findings and vulnerabilities and document actions taken.
• Support IAM, authentication, authorization, and role-based access controls.
• Contribute to secure development and DevSecOps practices across project teams.

Skills

Security engineering

Vulnerability remediation

IAM / least privilege

DevSecOps

Cloud security

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Azure

Microsoft 365

Job description

StraitSys Inc seeks a Security Engineer to provide cybersecurity engineering and technical security support for EOIR's enterprise modernization efforts. You will help design, implement, and test security controls across applications and environments while ensuring compliance with DOJ and Federal requirements.

The role requires collaboration with project teams, management, and government stakeholders to embed secure practices throughout the development lifecycle and incident response activities.