Security Engineer: DevSecOps for Federal AI Platforms

Riva Solutions Inc; Alexandria (VA); On-site; USD 135,000 - 150,000; Full time

Job summary

RIVA Solutions Inc. is seeking a Security Engineer to perform hands-on security analysis, vulnerability testing, and DevSecOps integration within the USPTO Kubernetes environment.

You will embed automated security gates into pipelines and ensure findings flow into remediation workflows. The role requires experience with GitLab CI/CD security, SAST/DAST, container scanning, and cloud-native security controls.

Qualifications

• Bachelor's degree with 5+ years of cybersecurity experience, or master's with 3+ years.
• Hands-on with GitLab CI/CD security, SAST/DAST tooling, container image scanning, and IaC security.
• Experience with Kubernetes security controls, admission controllers, and RBAC.
• Familiarity with SIEM (XSIAM/QRadar) and ITSM remediation workflows for triage and POA&M.
• Knowledge of NIST SP 800-53, FedRAMP, and federal ATO processes; ability to produce structured evidence.
• Scripting/automation: Python or Bash, REST APIs, GitLab YAML, JSON parsing.

Responsibilities

• Operate and maintain security gates in the USPTO GitLab CI/CD factory, ensuring production-only pathways follow gates.
• Run Snyk Agent scans on AI artifact types within the CI/CD pipeline and triage results for remediation.
• Maintain Kubernetes security posture across the USPTO container estate and elevate findings through the remediation workflow.
• Correlate DSPM findings with Axonius and Tenable data to prioritize backlog remediation.
• Monitor XSIAM and QRadar telemetry, triage alerts, and contribute to the three-tier evidence chain.
• Perform security audits, risk analysis, and code reviews for DSPM and AI platforms including AWS Bedrock.
• Support ATO documentation, SSP maintenance, and compliance dashboards.

Skills

GitLab CI/CD security

SAST/DAST tooling

Kubernetes security

Security risk assessment

Python or Bash scripting

Education

Bachelor's degree with 5+ years or Master's with 3+ years in cybersecurity

Tools

GitLab

Wiz

Snyk

Axonius

Tenable

ServiceNow

Kubernetes

Job description

RIVA Solutions Inc. is seeking a Security Engineer to perform hands-on security analysis, vulnerability testing, and DevSecOps integration within the USPTO Kubernetes environment.

You will embed automated security gates into pipelines and ensure findings flow into remediation workflows. The role requires experience with GitLab CI/CD security, SAST/DAST, container scanning, and cloud-native security controls.