Senior DevSecOps Engineer – TS/SCI Clearance

Cornerstone Defense; Reston (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401K match

Tuition assistance

Paid vacation

Fitness reimbursement

College savings

Commuter benefits

Financial advisory

FSAs

Health Savings Account

STD/LTD

Life/AD&D

EAP

Financial planning

Legal resources

Job summary

Cornerstone Defense is seeking a DevSecOps Engineer II in Reston, VA to join a mission-focused team delivering secure software for U.S. Government programs.

You will design and maintain secure CI/CD pipelines, integrate security into development, and guide engineers on secure coding practices. Responsibilities include IaC templating, security testing, incident response, and continuous improvement of security policies and tooling.

Qualifications

• 6+ years of DevSecOps or similar security-focused role in SDLC.
• Experience with CI/CD pipelines and automation tools.
• Familiarity with IaC and cloud security practices.

Responsibilities

• As a DevSecOps Engineer II, design, implement, and maintain secure CI/CD pipelines.
• Integrate security into development and operations lifecycle across teams.
• Collaborate to embed security into SDLC and enforce best practices.
• Build and maintain IaC templates with secure configurations.
• Perform security assessments, code reviews, and penetration testing.
• Monitor logs, respond to incidents, and manage IAM controls.
• Guide engineers on secure coding and remediation of findings.
• Support incident response and help develop security policies.

Skills

DevSecOps experience

CI/CD pipelines

Security in SDLC

Automation & tooling

Security testing & reviews

Tools

Jenkins

GitLab CI/CD

Artifactory

SonarQube

Selenium

Fortify

Acunetix

Prisma Cloud

Terraform

CloudFormation

Ansible

AWS

Azure

GCP

Python

Bash

Job description

Cornerstone Defense is seeking a DevSecOps Engineer II in Reston, VA to join a mission-focused team delivering secure software for U.S. Government programs.

You will design and maintain secure CI/CD pipelines, integrate security into development, and guide engineers on secure coding practices. Responsibilities include IaC templating, security testing, incident response, and continuous improvement of security policies and tooling.