Senior Security Analyst TS/SCI with Poly - DevSecOps & RMF

GetHired, Inc.; Corridor North (MD); On-site; USD 140,000 - 200,000; Full time

Job summary

Yellow Duck Technologies is seeking a Senior Security Analyst to ensure secure software development across the lifecycle and to support DevSecOps implementations compliant with RMF and DoD standards.

The role requires a TS/SCI clearance with polygraph, 10+ years in information security, and deep knowledge of DoD requirements (NIST 800-53, RMF) along with SAST/DAST/SCA tooling. Experience with containerization and Kubernetes security is essential.

Qualifications

• Active TS/SCI clearance with polygraph is required.
• Bachelor's degree in Cybersecurity, Computer Science, or related field; 4 years can substitute for a degree.
• 10+ years of information security experience.
• Strong knowledge of DoD security requirements (NIST 800-53, RMF).
• Experience with security testing tools (SAST, DAST, SCA).
• Understanding of secure software development lifecycle.
• Knowledge of containerization security and Kubernetes security.
• Experience with security compliance and authorization processes.
• Security+ or equivalent certification required; CISSP/GIAC or similar preferred.

Responsibilities

• Implement security controls and best practices.
• Support DevSecOps pipeline security integration.
• Conduct security assessments and vulnerability analysis.
• Manage security findings and POA&M.
• Support RMF activities and security documentation.
• Coordinate security scans and remediation efforts.
• Review code for security vulnerabilities.
• Implement secure coding practices and guidelines.
• Support incident response and security investigations.
• Maintain security documentation and compliance records.

Skills

DevSecOps

RMF

SAST

DAST

SCA

Container security

Kubernetes security

Education

Bachelor's degree in Cybersecurity/CS/related field

Tools

SAST

DAST

SCA

Kubernetes

Job description

Yellow Duck Technologies is seeking a Senior Security Analyst to ensure secure software development across the lifecycle and to support DevSecOps implementations compliant with RMF and DoD standards.

The role requires a TS/SCI clearance with polygraph, 10+ years in information security, and deep knowledge of DoD requirements (NIST 800-53, RMF) along with SAST/DAST/SCA tooling. Experience with containerization and Kubernetes security is essential.