Senior Federal Cybersecurity Specialist - DevSecOps

Socket.dev; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

BTI, a Service-Disabled Veteran-Owned Small Business, seeks a Security Specialist to lead security posture establishment and ongoing monitoring per NIST SP 800-53 Moderate baseline, FISMA, and FedRAMP. You will develop SSPs/SARs, track POA&Ms, and coordinate remediation with cross-functional teams.

You will integrate SAST/DAST/IAST into CI/CD, coordinate penetration testing, and ensure protection of FTI with encryption, access controls, and audit logging.

Qualifications

• Undergraduate degree in Cybersecurity, Computer Science, Information Systems, or related field.
• Security certifications such as CISSP, CISM, CCSP or equivalent are preferred.
• At least 8 years in information security, supporting FedRAMP/FISMA activities.

Responsibilities

• Establish, operate, and monitor security posture per NIST SP 800-53 Moderate baseline, FISMA, FedRAMP.
• Develop/maintain SSP, SAR, and POA&M tracking.
• Integrate SAST/DAST/IAST into DevSecOps CI/CD pipelines; triage findings.
• Coordinate remediation of vulnerabilities per timelines (CISA/DOL).
• Protect FTI and sensitive data per IRS Publication 1075; enforce encryption and access control.
• Support contingency and incident response testing; breach notification procedures.
• Coordinate with Dev, Infra, and AI teams to assess security of new features and AI tools.

Skills

Security governance

DevSecOps

Cloud security AWS

Incident response

Vulnerability management

Written communication

Education

Bachelor's degree in Cybersecurity/CS/Information Systems

Tools

Tenable

Trend Micro

AWS Security Tools

Security Hub

GuardDuty

Snyk

Job description

BTI, a Service-Disabled Veteran-Owned Small Business, seeks a Security Specialist to lead security posture establishment and ongoing monitoring per NIST SP 800-53 Moderate baseline, FISMA, and FedRAMP. You will develop SSPs/SARs, track POA&Ms, and coordinate remediation with cross-functional teams.

You will integrate SAST/DAST/IAST into CI/CD, coordinate penetration testing, and ensure protection of FTI with encryption, access controls, and audit logging.