Security Engineer II — DevSecOps for Defense Systems

Paragon Technology Group, Inc.; Illinois; On-site; USD 95,000 - 135,000; Full time

Job summary

Paragon Technology Group, Inc. is seeking a Security Engineer II to support the USTRANSCOM PEO-T contract. You will review NIST requirements, draft mitigations, and work with government customers on risk acceptance and POA&Ms. Strong SAST, threat modeling, and DevSecOps experience are required.

Active Secret Clearance and IAM II Certification are required, with a BS in CS or Cybersecurity. The role involves collaboration with multiple government organizations and a fast-paced environment.

Qualifications

• 1-3 years relevant experience in security engineering and risk assessment.
• Experience reviewing vulnerability scans using SAST tools and mitigating findings.
• Knowledge of Java, C#, Python, .NET, SQL.
• Experience with threat modeling and presenting findings to lead stakeholders.
• Familiarity with CI/CD, containers (Kubernetes, Docker) and microservices.
• Deep knowledge of OWASP Top 10 and secure coding practices.
• Experience with static code analysis tools: SonarSource, OpenText SAST, TruffleHog.
• Strong DevSecOps practices and secure development lifecycle understanding.
• Solid system and network security knowledge and cryptography basics.
• Ability to coordinate with developers, vendors, and government agencies.

Responsibilities

• Reviews evolving NIST requirements to support risk assessment activities.
• Prepares detailed specifications to mitigate security deficiencies from risk assessments.
• Collaborates with government customers to develop POA&Ms and support risk acceptance.
• Advise on secure coding practices and conduct follow-up risk assessments.
• Coordinate with developers and vendors to address security issues.
• Participate in Technical Interchange Meetings on PMO security topics.
• Support DISA STIG/SRG reviews and ingest them into risk assessment tools.

Skills

SAST reviews

Java

C#

Python

.NET

SQL

Threat modeling

CI/CD pipelines

Kubernetes

Docker

OWASP Top 10

DevSecOps

Vulnerability remediation

Communication skills

Security governance

Education

Bachelor's in Computer Science or Cybersecurity

IAM II Certification in Good Standing

Active Secret Clearance

Tools

SonarSource

OpenText SAST

TruffleHog

Job description

Paragon Technology Group, Inc. is seeking a Security Engineer II to support the USTRANSCOM PEO-T contract. You will review NIST requirements, draft mitigations, and work with government customers on risk acceptance and POA&Ms. Strong SAST, threat modeling, and DevSecOps experience are required.

Active Secret Clearance and IAM II Certification are required, with a BS in CS or Cybersecurity. The role involves collaboration with multiple government organizations and a fast-paced environment.