devsecops engineer

Booz Allen Hamilton

<div>DevSecOps Engineer<p><b>
The Opportunity:</b><br>
Today&rsquo;s dynamic technology landscape demands constant and rapid innovation. To facilitate this transformation, we must ensure continuous integration and application development. That&rsquo;s why we need you, an experienced DevOps engineer who&rsquo;s eager to design, test, and program critical applications for our clients who need them most.</p><p></p><p>
This is an opportunity to broaden your experience in software engineering while helping to develop software that will completely transform workflows and make a real impact. Here, we invest in technology&mdash;and we&rsquo;ll invest in you. With access to continuing education resources, tuition assistance opportunities, and tech development programs, you&rsquo;ll keep your skills sharp as you work at the leading edge of tech.</p><p></p><p>
Work with us as we build and test tools to transform the future.</p><p></p><p><b>
What You&rsquo;ll Work On:</b></p><ul><li><p>
Apply your expertise in DevSecOps to integrate and enhance security into our software delivery pipelines.</p></li><li><p>
Serve as a technical expert, using secure development practices and delivering continuous improvement across our CI/CD ecosystem.</p></li><li><p>
Evolve and secure CI/CD pipelines by integrating and automated security tools such as SAST, DAST, SCA, and container scanning to meet DoD requirements and reduce operational risk.</p></li><li><p>
Enhance DevSecOps pipelines by refining vulnerability detection thresholds, tuning scanners, reducing false positives, and optimizing remediation workflows.</p></li><li><p>
Harden Infrastructure-as-Code (IaC) templates, enforce policy-as-code across environments, conduct risk assessments, and contribute to system security plans (SSPs) and continuous authority to operate (ATO) efforts.</p></li><li><p>
Collaborate with development, operations, and security teams to support secure software delivery.</p></li><li><p>
Monitor pipeline activity for anomalies and assist in responding to security incidents.</p></li><li><p>
Champion Zero Trust principles and drive adoption of secure-by-design methodologies across the software development lifecycle (SDLC).</p></li></ul><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
5+ years of experience in cybersecurity engineering and DevSecOps in federal or defense environments employing IaC/CaC, CI/CD, and SSDLC concepts</p></li><li><p>
3+ years of experience in scripting, including Python or Bash and automation frameworks</p></li><li><p>
2+ years of experience implementing cybersecurity solutions in AWS cloud and container orchestration, including Kubernetes</p></li><li><p>
Knowledge of best practice cybersecurity and threat-based cybersecurity frameworks, including AI or ML security best practices</p></li><li><p>
Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools</p></li><li><p>
Knowledge of Agile and Change Management methodologies</p></li><li><p>
Top Secret clearance</p></li><li><p>
Bachelor&rsquo;s degree in Cybersecurity or Computer Science</p></li><li><p>
Security+ Certification</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
3+ years of experience reviewing code samples and applying whitelisting or exemption processes</p></li><li><p>
Experience developing Zero Trust security solutions for DevSecOps pipelines</p></li><li><p>
Experience evaluating security tools and assessing fit for inclusion in Development or Operational environments</p></li><li><p>
Possession of excellent verbal, technical writing, and documentation skills</p></li><li><p>
TS/SCI clearance</p></li><li><p>
Master&rsquo;s degree in an IT or Cybersecurity field</p></li><li><p>
AWS Solutions Architect, AWS Security, or CISSP Certification</p></li></ul><p></p><p><b>
Clearance:</b><b>
</b><br>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $77,600.00 to $176,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Candidate AI Usage Policy</b></p><p>
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on <b>your </b>own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited <b>unless permission is explicitly provided</b>.
</p><p></p><p><b>Work Model</b><br>
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.</p><ul><li><p><b>
Remote</b>: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</p></li><li><p><b>
Hybrid</b>: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</p></li><li><p><b>
Onsite</b>: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</p></li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

DevSecOps Engineer

The Aerospace Corporation

<div><p>The Aerospace Corporation is the trusted partner to the nation&rsquo;s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space&mdash; delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you&rsquo;ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.
</p><p></p><p>The Information Systems and Cyber Division (ISCD) is seeking a visionary technical leader to drive the modernization, secure architecture, and rapid deployment of software-intensive systems. In this role, you will bridge the gap between cutting-edge commercial cloud-native technologies and critical national security space, ground, and launch systems.</p>
<p>You will serve as a architect and trusted advisor, guiding customers and cross-functional engineering teams through legacy system migrations, containerization strategies, and robust DevSecOps implementations. If you are passionate about software architecture, automated delivery pipelines, and leading organizational change, this position offers a unique platform to shape the future of aerospace software engineering.</p>
<p></p><p><b>Work Model
</b></p><p>This is a full-time position based in El Segundo, CA, which requires 100% onsite work.</p>
<p></p><p><b>What You&rsquo;ll Be Doing
</b></p><ul><li><b>Technical &amp; Architecture Leadership: </b>Provide high-level software systems engineering and architectural direction for complex, large-scale applications across space, ground, and launch domains.</li>
<li><b>Software Modernization: </b>Lead the evolution of legacy monolithic architectures into modern, resilient, microservices-based configurations deployed across cloud and virtualized environments.</li>
<li><b>DevSecOps Integration: </b>Design and champion enterprise-scale automated pipeline architectures, transitioning manual security and compliance verification into modern, evidence-based continuous assurance.</li>
<li><b>Cloud-Native &amp; Containerization Strategy: </b>Lead rigorous technical trade studies and rapid prototyping efforts to evaluate and securely implement emerging cloud-native, containerization, and orchestration technologies.</li>
<li><b>Stakeholder &amp; Customer Interfacing: </b>Serve as a core technical liaison, translating high-level customer mission objectives into actionable architectural milestones, driving alignment across program managers, engineering teams, and external stakeholders.</li>
<li><b>Culture of Innovation: </b>Champion modern software development methodologies, driving positive change by introducing new commercial perspectives, challenging established practices, and mentoring junior engineers.</li>
</ul><p></p><p><b>What You Need to be Successful
</b></p><p><i>Minimum Requirements:
</i></p><ul><li>Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, or a related technical field.</li>
<li>6 years of experience with increasing responsibility in Software Architecture, Software Engineering, or DevSecOps systems.</li>
<li>Proven experience driving software modernization efforts, including containerizing enterprise applications and migrating legacy architectures to microservices.</li>
<li>Strong hands-on background in modern software development methodologies, automated CI/CD pipelines, and infrastructure-as-code concepts.</li>
<li>Excellent task prioritization, execution, and time management skills in a collaborative environment.</li>
<li>Willingness to travel occasionally to work locations or customer sites as required.</li>
<li>This position requires ability to obtain and maintain a security clearance, which is issued by the U.S. government. U.S. citizenship is required to obtain a security clearance.</li>
</ul><p></p><p><b>How You Can Stand Out
</b></p><p><i>It would be impressive if you have one or more of these:
</i></p><ul><li>Advanced degree (Master&rsquo;s or Doctorate) in a STEM or related technical field.</li>
<li>Exceptional communication and presentation skills, with a proven track record of translating complex technical concepts into clear business and mission value for non-technical stakeholders.</li>
<li>Extensive experience deploying, orchestrating (e.g., Kubernetes), and securing applications within enterprise cloud environments (AWS, Azure, or hybrid environments).</li>
<li>Proven experience conducting &quot;Build vs. Buy&quot; analyses for enterprise-scale software tooling, factoring in long-term sustainability and total cost of ownership.</li>
<li>Experience integrating open-source and commercial security, repository, or observability tools into automated enterprise software supply chains.</li>
<li>Strong track record of building, mentoring, and leading technical teams or working groups from the ground up.</li>
<li>Active TS/SCI clearance.</li>
</ul><p></p><p>We offer a competitive compensation package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to our business. The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge and skills.
</p><p></p><p>(Min - Max)</p>
$129,000.00 - $193,500.00
<p></p>Pay Basis: Annual
<p></p><p><b>Leadership Competencies
</b></p><p>Our leadership philosophy is simple: every employee, regardless of level and role, can demonstrate leadership. At Aerospace, our commitment is our people. To cultivate our talent and ensure that we have a strong pipeline of future leaders, we want individuals who:
</p><ul><li>Operate Strategically
</li><li>Lead Change
</li><li>Engage with Impact
</li><li>Foster Innovation
</li><li>Deliver Results
</li></ul><p></p><p><b>Ways We Reward Our Employees
</b></p><p>During your interview process, our team will provide details of our industry-leading benefits.</p>
<p>Benefits vary and are applicable based on Job Type. <i>A few highlights include:
</i></p><ul><li><p>Comprehensive health care and wellness plans</p>
</li><li><p>Paid holidays, sick time, and vacation</p>
</li><li><p>Standard and alternate work schedules, including telework options</p>
</li><li><p>401(k) Plan &mdash; Employees receive a total company-paid benefit of 8%, 10%, or 12% of eligible compensation based on years of service and matching contributions; employees are immediately eligible and vested in the plan upon hire</p>
</li><li><p>Flexible spending accounts</p>
</li><li><p>Variable pay program for exceptional contributions</p>
</li><li><p>Relocation assistance</p>
</li><li><p>Professional growth and development programs to help advance your career</p>
</li><li><p>Education assistance programs</p>
</li><li><p>An inclusive work environment built on teamwork, flexibility, and respect</p>
</li></ul><p></p><p>We are all unique, from various backgrounds and all walks of life, yet one thing bonds all of us to each other&mdash;the belief that we can make a difference. This core belief empowers us to do our best work at The Aerospace Corporation.</p>
<p></p><p><b>Equal Opportunity Commitment
</b></p><p>The Aerospace Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, age, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender, gender identity or expression, color, religion, genetic information, marital status, ancestry, national origin, protected veteran status, physical disability, medical condition, mental disability, or disability status and any other characteristic protected by state or federal law. If you&rsquo;re an individual with a disability or a disabled veteran who needs assistance using our online job search and application tools or need reasonable accommodation to complete the job application process, please contact us by phone at 310.336.5432 or by email at peoplemangmnt.mailbox@aero.org . You can also review Know Your Rights: Workplace Discrimination is Illegal .</p></div>

Software Modernization & DevSecOps Architecture Engineer

Bowhead

<div>Overview:
<p>
CLOUD ACCELERATION SERVICES AND CYBERSECURITY BUSINESS ENTERPRISE SYSTEMS (CASBES):</p><p></p><p><br>
Bowhead seeks individuals to network with, in effort to support the Cloud Acceleration Services (CAS) and Cybersecurity Business Enterprise Systems contract located in Montgomery, AL. The mission of this contract is to provide comprehensive cloud and cybersecurity services to modernize, standardize, secure and enhance its information technology (IT) infrastructure, platforms, and mission applications.</p>
Responsibilities:
<p>
Positions available include:</p><br>
<p></p><ul><li>
Senior Cloud Engineer</li><li>
Cloud Migration Engineer</li><li>
Cloud Operations Engineer</li><li>
Information System Security Officer (ISSO)</li><li>
Security Control Assessor Representative (SCAR)</li><li>
RMF Analyst</li><li>
Cybersecurity Analyst</li><li>
Vulnerability Management Analyst</li><li>
Identity and Access Management (IAM) Engineer</li><li>
DevSecOps Engineer</li><li>
Software Developer III</li><li>
Software Developer II</li><li>
Platform Engineer</li><li>
Database Administrator</li><li>
Data Migration Specialist</li><li>
Quality Assurance/Test Lead</li><li>
Test Automation Engineer</li><li>
Agile Scrum Master</li><li>
Technical Writer</li><li>
Training Specialist</li></ul>
Qualifications:
<ul><li>Required education, years of experience, and certifications will vary based on position requirements</li><li>
Intermediate to advanced level skills in networking and systems administration with Windows and/or Linux environments</li><li>
Intermediate to advanced level skills with any of the following Cisco, Juniper, Palo Alto products</li><li>
Experience using scanning tools such as HBSS, NESSUS, Nmap, Splunk, Elastic</li><li>
Experience working with SDREN or DREN networks preferred</li><li>
Ability to communicate effectively</li><li>
Strong interpersonal skills and good judgment with the ability to work alone or as part of a team</li></ul><p></p><p><br>
Physical Demands:</p><br>
<p></p><ul><li>
Must be able to lift up to 20 pounds</li><li>
Must be able to stand and walk for prolonged amounts of time</li><li>
Must be able to twist, bend and squat periodically</li></ul><p></p><p><br>
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Secret level. US Citizenship is a requirement for Secret clearance at this location.</p></div>

Cloud Acceleration Services and Cybersecurity Business Enterprise Systems

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
Ensure the confidentiality, integrity, and availability of an organization's information systems and data and effective implementation of security measures within development processes through integrating security into the operational and development processes to support the organization in streamlining and enhancing the development processes In addition, work closely with cross-functional teams to integrate security practices into their workflows and ensure that security is considered throughout the software development lifecycle, collaborate with stakeholders, manage security initiatives, and provide guidance on secure coding practices. responsible for identifying and mitigating security risks, conducting security assessments, and ensuring compliance with relevant regulations and standards to help improve software reliability, security, and quality.</p>
<p>
4. KEY ACCOUNTABILITIES</p>
<p>
Description</p>
<p>
1. Collaborate with cross-functional teams to integrate security practices into development processes and create seamless flow of work.</p>
<p>
2. Provide guidance and support on secure coding practices, secure design principles, and security risk mitigation.
</p><p>3. Develop and maintain security documentation and guidelines for Continuous Integration / Continuous Development CI/CD pipeline tools and processes. Additionally, Design and implement secure (CI/CD) pipelines for building, testing and deploying software, incorporating security testing tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA)</p>
<p>
4. Evaluate and recommend the implementation of security tools and technologies to enhance the security posture of the organization within the CI/CD pipeline.
</p><p>5. Responsible for the security of the software development process, including automating scans, code verification, and developing security protocol to protect sensitive data and ensure proper prevention against cyber threats.</p>
<p>
6. Review and enhance containers&rsquo; security measures within the bank IT environment (e.g. Kubernetes, OpenShift, etc)
</p><p>7. Collaborate with both development and operations teams to create a seamless flow of work and maintain an agile workflow.</p>
<p>
8. Ensure continuous integration and delivery (CI/CD) processes are followed, promoting the speedy release of high-quality software</p>
<p>
9. Support the implementation of the key strategic business initiatives and projects through following the secure software development life cycle including specifying the confidentiality, integrity, and availability requirements, addressing security requirements throughout the development of new systems and performing proper risk assessment prior to releasing new systems to production.</p>
<p>
10. Review new technologies and changes to existing technologies for in house developed applications to ensure proper information security requirements/controls and compliance with relevant security policies and compliance mandates.</p>
<p>
11. Conduct the annual review and update of the area&rsquo;s processes, procedures and recommend updates to relevant policies with the adherence to the developed SLAs.</p>
<p>
Policies, Processes and Procedures</p>
<p>
12. Participate, develop and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural / legislative requirements are fulfilled.</p>
<p>
Day-to-day management</p>
<p>
13. Follow the day-to-day operations related to own jobs in the Information Security Management department to ensure continuity of work.</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with relevant laws, regulations, and industry standards (e.g., CBE, PCI-DSS, ISO 27001).</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS</p><p>
Qualifications &amp; Experience</p><p>
 Bachelor's degree in Computer Science, Information Security, or a related field. A master's degree is preferred.</p><p>
 3-6 years of proven experience in a similar security-focused role. (5-8 years for Sr. analyst)</p><p>
 Proven experience as a DevSecOps Engineer or similar role, with strong background in software development lifecycle and security</p><p>
 Strong knowledge of secure coding practices, secure design principles, and common security vulnerabilities.</p><p>
 Familiarity with agile development methodologies and experience integrating security into agile processes.</p><p>
 Knowledge of industry regulations and standards such as ISO 27001, NIST, OWASP, etc.</p><p>
 Abroad understanding of security practices such as penetration testing, threat modelling, vulnerability management and static &amp; dynamic application security testing</p><p>
 Experience with CI/CD tools such as Gitlab CI/CD, version control systems, code repositories, etc.</p><p>
 Experience with containerization and orchestration tools (e.g. Docker, Kubernetes, Helm, ArgoCD)</p><p>
 Knowledge of scripting languages (e.g. Bash, Python, Go)</p><p>
 Experience conducting security assessments, vulnerability testing, and risk assessments.</p><p>
 Familiarity with security tools and technologies such as vulnerability scanners, code analysis tools, etc.</p><p>
Recommended Certification:</p><p>
 CISSP</p><p>
 CISM</p><p>
 CSSLP</p><p>
 GIAC Cloud Security Automation (GCSA)</p><p>
 Certified DevSecOps Engineer (CDSOE)</p><p>
 Certified DevSecOps Professional (CDP)</p><p>
 DevSecOps Engineering (DSOE)</p><p>
 Certified Ethical Hacker (CEH)</p><p>
 Offensive Security Defense Analyst (OSDA)</p><p>
Skills</p><p>
 Excellent communication and collaboration skills</p><p>
 Strong problem-solving and analytical skills</p><p>
 Proficient verbal and written English</p><p>
 Ability to manage and prioritize tasks</p><p>
 Knowledge of top-level cybersecurity subjects and issues</p><p>
 Ability to research threats and draw up logical conclusions through well-thought-out, unbiased processes</p><p>
 Ability to troubleshoot and solve problems</p><p>
 Ability to learn new technologies quickly</p><p>
 Ability to bring together data from diverse sources and articulate it into simple and concise information</p><div><br>
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div><div>
Travel: No</div></div>

DEVSECOPS SENIOR ANALYST / SENIOR ANALYST

COmspark International

<p>Position DevOps Engineer<br/>Duration 2 months<br/>Location Qatar (Onsite)<br/>Years of Experience 5+ Years<br/>Notice Period Immediate</p><p>Responsibilities</p><ul><li>Lead deployment and configuration of on-prem Linux-based platformsfor AI workloads.</li><li>Design and configure KVM virtualization</li><li>Architect and implement GPU-enabled environments for production LLM inference.</li><li>Deploy and operate containerized LLM serving stacksin production.</li><li>Design and validate GPU utilization, isolation, and health monitoring.</li><li>Integrate deployments with CI/CD pipelines and security controls.</li><li>Apply security hardening, RBAC, encryption, and audit-ready configurations.</li><li>Design HA and DR strategies and prepare systems for future scale-out.</li><li>Lead troubleshooting, performance tuning, and stabilization.</li><li>Produce architecture documentation, runbooks, and handover materials.</li><li>Primary Skills</li><li>5+ years of experience in DevOps, Platform Engineering, or Infrastructure Engineering roles.</li></ul><ul><li>Strong Linux system administration skills, including networking,storage, performance tuning,</li></ul><p>and security hardening.environments.equivalent).runtimes.Inference Server.vector databases (e.g., Qdrant), and observability tools.</p><ul><li>Hands-on experience deploying and operating LLMs in production on on-premises</li><li>Proven experience managing GPU infrastructure using NVIDIA GPUs (H100, A100, H200 or</li><li>Hands-on experience installing, configuring, and troubleshooting CUDA drivers and GPU</li><li>Experience with containerized workloads using Docker or OCI-compliant runtimes.</li><li>Hands-on experience with LLM serving frameworks such as vLLM, TensorRT-LLM, or Triton</li><li>Experience designing and supporting GPU utilization, isolation, and performance monitoring.</li><li>Strong hands-on experience with KVM virtualization in production.</li><li>Experience working with modern AI application stacks, including backend APIs, PostgreSQL,</li><li>Strong experience using Infrastructure as Code and automation tools, including Ansible.</li><li>Hands-on experience designing and operating CI/CD pipelines in enterprise environments.</li><li>Hands-on experience with Kubernetes on-premisessetup.</li></ul><ul><li>Strong understanding and practical implementation experience of DevSecOps practices,</li><li>including secure pipelines, SAST integration, secrets management, and least-privilege access.</li><li>Experience designing orsupporting high availability and disasterrecovery strategies, including</li></ul><p>backup, restore, and failover concepts.</p><ul><li>Strong experience working in on-prem, air-gapped, orregulated environments</li></ul><p>Work Location: In person</p>

DevOps Engineer

Abacus

<div>
 <strong>
  Job Overview:
  <br/>
  <br/>
 </strong>
 We are looking for a skilled and proactive
 <strong>
  Security Specialist
 </strong>
 to design, implement, and manage secure architectures across modern application environments. The ideal candidate will have strong expertise in
 <strong>
  API security, microservices architecture, and DevSecOps practices
 </strong>
 , ensuring robust protection of systems, data, and digital assets.
 <br/>
 <br/>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Design and implement secure API and microservices architectures aligned with industry best practices
  </li>
  <li>
   Develop and enforce API security frameworks, including authentication, authorization, and threat protection mechanisms
  </li>
  <li>
   Integrate security practices within DevSecOps pipelines, ensuring secure code deployment and continuous monitoring
  </li>
  <li>
   Manage and implement consent management services in compliance with data privacy regulations
  </li>
  <li>
   Conduct security assessments, vulnerability testing, and risk analysis across applications and infrastructure
  </li>
  <li>
   Collaborate with development, DevOps, and product teams to embed security across the SDLC
  </li>
  <li>
   Monitor and respond to security incidents, ensuring timely mitigation and reporting
  </li>
  <li>
   Stay updated with emerging security threats, tools, and compliance standards
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proven experience in application security, API security, or cybersecurity roles
  </li>
  <li>
   Strong understanding of microservices architecture and secure API development
  </li>
  <li>
   Hands-on experience with DevSecOps tools and practices (CI/CD security, SAST, DAST, etc.)
  </li>
  <li>
   Knowledge of API security standards (OAuth2.0, OpenID Connect, JWT, API gateways)
  </li>
  <li>
   Experience with consent and identity management solutions
  </li>
  <li>
   Familiarity with cloud security (AWS, Azure, or GCP) is a plus
  </li>
  <li>
   Strong analytical, problem-solving, and communication skills
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Certifications such as CISSP, CEH, CISM, or relevant cloud security certifications
  </li>
  <li>
   Experience with API management platforms (Apigee, Kong, MuleSoft, etc.)
  </li>
  <li>
   Knowledge of data privacy regulations (GDPR, etc.)
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us?
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Opportunity to work on modern, scalable, and secure architectures
  </li>
  <li>
   Exposure to cutting-edge technologies in cloud and API security
  </li>
  <li>
   Collaborative and growth-driven environment
   <br/>
  </li>
 </ul>
</div>


SECURITY SPECIALIST

Spry Methods, Inc

<div><div><div><div><b>Who We&rsquo;re Looking For (Position Overview):</b></div>
The Web Developer Security Engineer protects mission-critical web applications, application programming interfaces (APIs), and sensitive data by embedding security across the software development lifecycle. This role combines application security engineering, secure software development, vulnerability remediation, monitoring, and compliance support.</div></div>
<div><div><h3 class="jobSectionHeader"><b>What Your Day-To-Day Looks Like (Position Responsibilities):</b></h3><div><div><div>
<div>
<div><ul><li><p>Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs.</p>
</li>
</ul></div><div><ul><li><p>Drive the vulnerability lifecycle through threat modeling, security assessments, and technical validation of remediation actions.</p>
</li>
</ul></div><div><ul><li><p>Support secure design patterns, data protection mechanisms, and secure communication protocols across applications and supporting services.</p>
</li>
</ul></div></div><div><div><ul><li><p>Review and analyze web server and application logs to detect anomalies and indicators of compromise.</p>
</li>
</ul></div><div><ul><li><p>Implement automation scripts for threat intelligence integration and application security monitoring.</p>
</li>
</ul></div><div><ul><li><p>Participate in audits, risk assessments, and security authorization activities tied to federal frameworks.</p>
</li>
</ul></div></div></div></div></div></div></div><div><div><h3 class="jobSectionHeader"><b>What You Need to Succeed (Minimum Requirements):</b></h3><div><div><div>
<div>
<ul><li><p>Minimum of three years of experience in web application security, application security engineering, or secure software development lifecycle work.</p>
</li>
</ul></div><div><ul><li><p>Hands-on experience in secure software development, DevSecOps automation, and vulnerability remediation.</p>
</li>
</ul></div><div><ul><li><p>Proven experience with .NET technologies, HTML5, CSS3, JavaScript, representational state transfer (REST) APIs, and structured query language (SQL).</p>
</li>
</ul></div><div><ul><li><p>Ability to leverage AI-assisted development tools and scripting languages to automate monitoring and compliance efforts.</p>
</li>
</ul></div><div><ul><li><p>Strong understanding of the Open Worldwide Application Security Project (OWASP) Top 10, secure coding standards, web application firewalls (WAFs), file integrity monitoring, and security testing tools.</p>
</li>
</ul></div><div><ul><li><p>Ability to perform risk assessments and provide remediation guidance for core systems and dependencies.</p>
</li>
</ul></div><div><ul><li><p>Bachelor's degree or higher in computer science, cybersecurity, information systems, engineering, or a related field.</p>
</li>
</ul></div><div><ul><li><p>Ability to meet federal screening and suitability requirements prior to start.</p>
</li>
</ul></div><div><ul><li><p>Current security certifications maintained for a minimum of five years, spanning application security (such as CSSLP, GWEB, or CASE), offensive security (such as OSWE or OSCP), and foundational security (such as Security+ or GSEC); expired or never-used certifications will not be considered.</p>
</li>
</ul></div></div></div></div></div></div><div><div><h3 class="jobSectionHeader"><b>Ideally, You Also Have (Preferred Qualifications):</b></h3><div><div><div>
<div>
<ul><li><p>In-depth experience with federal cybersecurity frameworks and authorization processes.</p>
</li>
</ul></div><div><ul><li><p>Experience with threat modeling, resilient security architecture, cloud security, and container security.</p>
</li>
</ul></div></div></div></div></div></div><div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Web Developer Security Engineer

Search 1616+ Devsecops engineer jobs near you this June. New roles added regularly across leading industries. Apply today.