Senior DevSecOps Engineer: Secure SDLC & Artifact Mgmt

Geospatial And Cloud Analytics Inc; Quantico (VA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) matching

Competitive salary

Dental insurance

Health insurance

Paid time off

Parental leave

Vision insurance

Job summary

Geospatial And Cloud Analytics Inc seeks a Software Engineer SME specializing in DevSecOps to lead secure software development and artifact management for NCIS programs in Quantico, VA. You will guide secure SDLC adoption, SBOM efforts, and vulnerability remediation across diverse environments.

The role requires extensive experience in secure coding, Zero Trust, and collaboration with cybersecurity teams, with hybrid work and onsite support as needed.

Qualifications

• Active Top Secret clearance with SCI access required.
• 10+ years of relevant technical experience with a high school diploma, or commensurate experience.
• Expert-level experience with secure software development and DevSecOps across full-stack environments.
• Expertise with artifact management platforms such as Nexus, Artifactory, NuGet, or comparable tech.
• Experience implementing and supporting SAST/DAST and code quality platforms such as SonarQube, Aikido, CodeQL.
• Strong knowledge of secure coding practices, dependency management, SBOM requirements.
• Experience implementing Git-based development workflows, including branch protection policies and pre-commit hooks.
• Experience with relational and NoSQL databases and multiple programming languages.
• Understanding of Zero Trust principles in secure software development.
• Ability to mentor development teams on secure SDLC.

Responsibilities

• Provide technical guidance migrating mission applications to secure SDLC toolchains.
• Implement and support DevSecOps across the SDLC, aligning with DON-CIO policies.
• Configure and optimize artifact management platforms (Nexus, Artifactory, NuGet).
• Support secure coding practices and software supply chain security initiatives.
• Implement and manage SAST/DAST capabilities (SonarQube, Aikido, CodeQL).
• Support SBOM development, dependency management, and remediation processes.
• Implement secure Git-based development workflows with branch rules and pre-commit hooks.
• Provide guidance on Zero Trust in development environments.
• Evaluate cross-database and language stack security and practices.
• Collaborate with developers and cybersecurity teams to embed security controls.
• Identify security weaknesses and advise corrective actions.
• Mentor teams to adopt secure software development standards.

Skills

Top Secret clearance

10+ years experience

Secure software development

DevSecOps principles

Artifact management

SAST/DAST tools

SBOM requirements

Git workflows

Zero Trust

Education

High school diploma

Tools

Nexus

Artifactory

NuGet

SonarQube

Aikido

CodeQL

Job description

Geospatial And Cloud Analytics Inc seeks a Software Engineer SME specializing in DevSecOps to lead secure software development and artifact management for NCIS programs in Quantico, VA. You will guide secure SDLC adoption, SBOM efforts, and vulnerability remediation across diverse environments.

The role requires extensive experience in secure coding, Zero Trust, and collaboration with cybersecurity teams, with hybrid work and onsite support as needed.