Senior DevSecOps & Security Tooling Lead

Istaridigital.Ai; Huntsville (AL); On-site; USD 135,000 - 220,000; Full time

Job summary

Istari Digital seeks a Senior Security Engineer to lead and advance the security tooling that tests and validates our software against compliance and cybersecurity standards. You will ensure our toolchain is consistently enforced, highly trustworthy, and continuously enhanced as our products, customer base, and regulatory requirements expand.

You will translate RMF/NIST requirements into automated, risk-based controls that give engineers fast, actionable feedback early in development.

Qualifications

• 7+ years in DevSecOps, app security, and security ops, incl. 3+ years owning tooling in CI/CD pipelines.
• Experience mapping tooling and gates to RMF/NIST controls with evidence for assessments.
• Proven ability to influence engineering teams without direct authority.
• Scripting or automation experience in Python, Bash, or similar.
• Security+ or equivalent DoD 8140 qualification (or ability to obtain within 2 months).
• U.S. citizen residing and working in the U.S.

Responsibilities

• Own and evolve the security toolchain across the SDLC.
• Tune controls to compliance requirements (NIST RMF, NIST 800-53/800-171).
• Enforce integrity with artifact signing, signatures, and deployment checks.
• Automate SBOMs and VEX data for delivered software.
• Drive shift-left adoption and AI-assisted security triage.

Skills

CI/CD tooling ownership

SAST/SCA configuration

NIST RMF mapping

Python or Bash scripting

AI-powered security automation

Incident response experience

Security governance

Education

DoD 8140 certification

Tools

GitHub

Argo CD

JFrog

Snyk

Job description

Istari Digital seeks a Senior Security Engineer to lead and advance the security tooling that tests and validates our software against compliance and cybersecurity standards. You will ensure our toolchain is consistently enforced, highly trustworthy, and continuously enhanced as our products, customer base, and regulatory requirements expand.

You will translate RMF/NIST requirements into automated, risk-based controls that give engineers fast, actionable feedback early in development.