Senior Cloud Security / DevSecOps Engineer

DANASTAR Professional Services, LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Three weeks of paid time off

Paid Federal holidays

401(k) retirement plan

Job summary

EastBay Systems seeks a Senior Cloud / DevSecOps Engineer to join an established cybersecurity engineering team supporting a Federal hybrid‑cloud environment. This hands‑on role focuses on secure cloud environments, CI/CD security, application security, automation, and secure software delivery.

You will collaborate with development, cloud, security engineering, SOC, and GRC teams to improve security across the development and deployment lifecycle, contributing quickly and solving complex

Qualifications

• 7+ years of experience in DevSecOps, cloud engineering, cybersecurity engineering, software engineering, or a related technical role.
• Hands-on experience with Azure and/or AWS.
• Experience securing CI/CD pipelines and software development processes.
• Experience with SAST, DAST, SCA, secrets scanning, container scanning, or IaC scanning.
• Experience with Azure DevOps, GitHub, GitLab, Jenkins, or similar CI/CD platforms.
• Experience with PowerShell, Python, REST APIs, or similar scripting and automation technologies.
• Working knowledge of cloud networking, identity, logging, and security controls.
• Experience with Microsoft Sentinel or a comparable SIEM platform.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.
• Ability and willingness to work onsite 2 days per week and transition to 5 days onsite if required by the client.

Responsibilities

• Integrate security into CI/CD pipelines and software development processes.
• Support SAST, DAST, SCA, secrets scanning, container scanning, and Infrastructure-as-Code security testing.
• Work with developers to identify and remediate application, API, dependency, and cloud‑security issues.
• Support secure application deployments across Azure and AWS.
• Assist with cloud security configuration, identity, access controls, logging, monitoring, and vulnerability remediation.
• Support Microsoft Entra ID, Conditional Access, RBAC, PIM, and least‑privilege access.
• Develop security automation using PowerShell, Python, Azure Logic Apps, REST APIs, JSON, or similar technologies.
• Integrate application and cloud telemetry with Microsoft Sentinel and enterprise monitoring platforms.
• Participate in cloud and application security architecture reviews.
• Support Federal cybersecurity requirements, including FISMA, NIST RMF, NIST SP 800-53, FedRAMP, and Continuous Monitoring.

Skills

DevSecOps

Cloud engineering

Automation

CI/CD security

Application security

Scripting

PowerShell

Python

REST APIs

Troubleshooting

Independent work

Education

Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field

Tools

Azure DevOps

GitHub

GitLab

Jenkins

Terraform

Docker

Kubernetes

OpenShift

Microsoft Sentinel

Job description

About EastBay Systems

EastBay Systems is a cybersecurity and IT consulting firm supporting Federal civilian agencies. Our services include Cloud Security, DevSecOps, Security Engineering, SOC Operations, GRC, and Continuous Monitoring.

Location: Washington, DC Area

Work Arrangement: Hybrid – 2 days onsite / 3 days remote, with the ability to transition to 5 days onsite if required by the client

Job Type: Full-Time

About the Role

We are seeking a Senior Cloud / DevSecOps Engineer to join an established cybersecurity engineering team supporting a Federal hybrid‑cloud environment.

This is a hands‑on role focused on secure cloud environments, CI/CD security, application security, automation, and secure software delivery. You will work closely with development, cloud, security engineering, SOC, and GRC teams to improve security throughout the development and deployment lifecycle.

We are looking for someone who can contribute quickly, solve complex technical problems, and work independently without being expected to own every aspect of the security environment.

What You’ll Do

• Integrate security into CI/CD pipelines and software development processes.
• Support SAST, DAST, SCA, secrets scanning, container scanning, and Infrastructure-as-Code security testing.
• Work with developers to identify and remediate application, API, dependency, and cloud‑security issues.
• Support secure application deployments across Azure and AWS.
• Assist with cloud security configuration, identity, access controls, logging, monitoring, and vulnerability remediation.
• Support Microsoft Entra ID, Conditional Access, RBAC, PIM, and least‑privilege access.
• Develop security automation using PowerShell, Python, Azure Logic Apps, REST APIs, JSON, or similar technologies.
• Integrate application and cloud telemetry with Microsoft Sentinel and enterprise monitoring platforms.
• Participate in cloud and application security architecture reviews.
• Support Federal cybersecurity requirements, including FISMA, NIST RMF, NIST SP 800-53, FedRAMP, and Continuous Monitoring.

What We’re Looking For

• 7+ years of experience in DevSecOps, cloud engineering, cybersecurity engineering, software engineering, or a related technical role.
• Hands‑on experience with Azure and/or AWS.
• Experience securing CI/CD pipelines and software development processes.
• Experience with application‑security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or IaC scanning.
• Experience with Azure DevOps, GitHub, GitLab, Jenkins, or similar CI/CD platforms.
• Experience with PowerShell, Python, REST APIs, or similar scripting and automation technologies.
• Working knowledge of cloud networking, identity, logging, and security controls.
• Experience with Microsoft Sentinel or a comparable SIEM platform.
• Strong troubleshooting and problem‑solving skills.
• Ability to work independently while collaborating effectively across technical teams.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.
• Ability and willingness to work onsite 2 days per week and transition to 5 days onsite if required by the client.

Nice to Have

• Terraform or other Infrastructure-as-Code experience.
• Docker, Kubernetes, OpenShift, or other container-platform experience.
• Microsoft Defender for Cloud or Defender XDR experience.
• Federal cybersecurity experience supporting FISMA, RMF, FedRAMP or NIST requirements.
• CISSP, CCSP, AZ-500, AWS Security Specialty, or similar certifications.

Benefits

EastBay Systems offers a competitive benefits package for eligible full‑time employees, including:

• Medical, dental, and vision insurance
• Three weeks of paid time off
• Paid Federal holidays
• 401(k) retirement plan with employer contribution
• Additional employer‑sponsored benefits in accordance with company policy

Equal Employment Opportunity

EastBay Systems is an Equal Opportunity Employer. Employment decisions are based on qualifications, merit, business needs, and job‑related requirements.

We do not discriminate on the basis of race, color, ethnicity, national origin, religion, sex, pregnancy, sexual orientation, gender identity or expression, age, disability, genetic information, protected veteran status, marital status, or any other characteristic protected by applicable Federal, state, or local law.