Security Engineer - DHS-Focused DevSecOps Expert

Talentify; McLean (VA); On-site; USD 100,000 - 155,000; Full time

Job summary

Steampunk is seeking a Security Engineer to support a government customer in McLean, VA. You will review security architectures, guide remediation, and ensure compliance with federal requirements.

Expect collaboration with development and operations teams, and opportunities to build tools that automate compliance and review code for vulnerabilities. You will monitor ISVM alerts, POA&Ms, and security controls, while participating in DevSecOps across lifecycles.

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• At least one security-related certification.
• Experience evaluating system, network, or infrastructure security controls against FISMA/NIST.
• Hands-on background in software, systems, or DevOps.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Review the security architecture of new systems, applications, and technologies to identify and mitigate risks.
• Monitor DHS ISVM alerts and drive remediation with system teams.
• Proactively update POA&Ms and track weaknesses to scheduled completion dates.
• Evaluate waivers and risk acceptance memos for system risk management.
• Participate in DevSecOps activities and integrate security into the development lifecycle.
• Provide audit support and maintain security documentation across authorized systems.

Skills

Security concepts

Vulnerability assessment

DevSecOps

Cloud engineering

Scripting (Python/PowerShell)

Communication

Agile/DevOps

Education

Bachelor's degree

Master's degree

No degree with 9 years experience

Tools

Splunk

Python

PowerShell

Bash

Job description

Steampunk is seeking a Security Engineer to support a government customer in McLean, VA. You will review security architectures, guide remediation, and ensure compliance with federal requirements.

Expect collaboration with development and operations teams, and opportunities to build tools that automate compliance and review code for vulnerabilities. You will monitor ISVM alerts, POA&Ms, and security controls, while participating in DevSecOps across lifecycles.