Security Engineer II: DevSecOps & Risk Modeling

ADP, Inc.; Illinois; On-site; USD 80,000 - 85,000; Full time

Job summary

Paragon Technology Group is seeking a Security Engineer II to support the USTRANSCOM PEO-T contract. The role involves reviewing NIST requirements, creating specifications to address cybersecurity gaps, and collaborating with government customers on risk management activities.

The candidate should have 1-3 years of relevant experience in security testing, threat modeling, and DevSecOps practices, with strong communication skills and the ability to work with cross-functional teams.

Qualifications

• Experience reviewing vulnerability scans with SAST tools and mitigating findings.
• Knowledge of multiple programming languages (Java, C#, Python, .NET, SQL).
• Experience with threat modeling and presenting findings to stakeholders.
• Understanding of CI/CD, containerization, and microservices architecture.
• Familiarity with OWASP Top 10 and secure coding practices.
• Experience with static code analysis tools: SonarSource, OpenText SAST, TruffleHog.
• Proficiency in DevSecOps practices and security automation.
• Strong knowledge of network and system security and cryptography.
• Ability to communicate remediation plans to development teams.
• Comfort working in fast-paced environments with clear communication.
• Experience hardening servers and network devices.
• Ability to coordinate with developers, vendors and government agencies.
• Experience contributing to Technical Interchange Meetings on security topics.
• Support PMO systems compliance with executive orders and policy.
• Suggest improvements to network/security architectures to boost security posture.

Responsibilities

• Review evolving NIST requirements to support risk assessment.
• Prepare detailed specs to mitigate security deficiencies from risk assessments.
• Collaborate with government customers to develop POA&Ms and support risk acceptance.

Skills

Vulnerability scanning (SAST)

Programming languages

Threat modeling

CI/CD & DevSecOps

Containerization (Kubernetes, Docker)

OWASP Top 10

Static code analysis tools

Security architecture & hardening

Security reviews & remediation

Cross-team communication

Stakeholder collaboration

PMO & government compliance

Network security & cryptography

Technical interchanges & meetings

DISA STIG/SRGs knowledge

Education

IAM II Certification (CGRC, Security X, CISM, CISSP, GSLC, CCISO)

Bachelor’s in Computer Science or Cybersecurity

Tools

Kubernetes

Docker

SonarSource

OpenText SAST

TruffleHog

Job description

Paragon Technology Group is seeking a Security Engineer II to support the USTRANSCOM PEO-T contract. The role involves reviewing NIST requirements, creating specifications to address cybersecurity gaps, and collaborating with government customers on risk management activities.

The candidate should have 1-3 years of relevant experience in security testing, threat modeling, and DevSecOps practices, with strong communication skills and the ability to work with cross-functional teams.