Senior Software Developer — Secure DevOps (RHEL/Kubernetes)

Scientific Research Corporation; San Antonio (TX); On-site; USD 130,000 - 170,000; Full time

Job summary

Scientific Research Corporation in San Antonio, TX is seeking a Sr Software Developer to support a Joint Staff analytic system over the next 2-5 years. You will work at the 16th Air Force and design, test, and implement security-focused software.

Key duties include building automated baseline hardening with Ansible, Bash, Python; integrating SAST/SCA in CI/CD; deploying Docker/Kubernetes containers; contributing to RMF artifacts in Xacta; and performing vulnerability scans with ACAS/Nessus.

Qualifications

• Bachelor’s degree required in a STEM field with 4+ years of experience.
• Active security certifications such as CASP+/CISSP/CISM/CCISO.
• Strong Linux (RHEL 8/9) admin, command-line, services, and SELinux knowledge.
• Ability to work independently while contributing to a diverse team.

Responsibilities

• Design, test, and apply automated baseline hardening scripts across five on-prem servers and containers.
• Embed automated security testing into CI/CD pipelines using SAST and SCA via SonarQube.
• Package, deploy, and secure Docker/Kubernetes containers; validate image provenance and secure runtimes.
• Develop RMF packages including SSP, ConMon, and SAP in Xacta eGRC.
• Conduct vulnerability scans with ACAS/Nessus and SCAP; coordinate patch cycles.
• Create POA&M entries for identified controls with system engineers.

Skills

Ansible

Docker

Kubernetes

Python

Java

Scripting

Independent work

Education

Bachelor's Degree in Cybersecurity, CS, IT, SWE or STEM

CASP+ (SecurityX)

CISSP

CISM

CCISO

Tools

ACAS

Tenable Nessus

SonarQube

Xacta eGRC

STIG Viewer

SCAP

PostgreSQL

Job description

Scientific Research Corporation in San Antonio, TX is seeking a Sr Software Developer to support a Joint Staff analytic system over the next 2-5 years. You will work at the 16th Air Force and design, test, and implement security-focused software.

Key duties include building automated baseline hardening with Ansible, Bash, Python; integrating SAST/SCA in CI/CD; deploying Docker/Kubernetes containers; contributing to RMF artifacts in Xacta; and performing vulnerability scans with ACAS/Nessus.