Security Engineer, DevSecOps for Federal AI Platforms

RIVA Solutions, Inc.; Alexandria (VA); On-site; USD 135,000 - 150,000; Full time

Job summary

RIVA Solutions, Inc. seeks aSecurity Engineer to perform hands-on security analysis, vulnerability testing, and DevSecOps integration in a large Kubernetes environment for a federal program. You’ll embed automated security gates and coordinate with ServiceNow and SIEM tooling.

The role requires strong GitLab CI/CD, SAST/DAST, Kubernetes security, and collaborative Agile work in a government setting. Salary reflects federal contractor standards and offers growth in a mission-driven team.

Qualifications

• Bachelor’s degree with 5+ years of cybersecurity experience or Master’s degree with 3+ years of relevant experience.
• Hands‑on experience with GitLab CI/CD security, SAST/DAST, container image scanning, and IaC security analysis.

Responsibilities

• Operate and maintain Wiz Code within the USPTO GitLab CI/CD software factory and ensure production is gated by review gates.
• Run Snyk Agent Scan on AI-native artifacts and triage findings for ServiceNow remediation queue.
• Maintain and tune Kubernetes security posture across the USPTO container estate and escalate findings through remediation workflow.
• Correlate DSPM findings with Axonius and Tenable inputs to prioritize remediation.
• Monitor XSIAM and QRadar SIEM telemetry and contribute to evidence chain for reporting.
• Perform security audits, risk analysis, and reviews for DSPM and AI platforms such as AWS Bedrock.

Skills

GitLab CI/CD security

SAST/DAST tooling

Container image scanning

IaC security analysis

Kubernetes security

RBAC

Python or Bash

REST API interaction

Education

Bachelor’s degree in cybersecurity

Master’s degree in cybersecurity

Tools

Wiz Code/Defend/DSPM

Snyk Agent Scan

Netskope CASB

Axonius

Tenable

XSIAM

QRadar

ServiceNow

Job description

RIVA Solutions, Inc. seeks aSecurity Engineer to perform hands-on security analysis, vulnerability testing, and DevSecOps integration in a large Kubernetes environment for a federal program. You’ll embed automated security gates and coordinate with ServiceNow and SIEM tooling.

The role requires strong GitLab CI/CD, SAST/DAST, Kubernetes security, and collaborative Agile work in a government setting. Salary reflects federal contractor standards and offers growth in a mission-driven team.