More jobs:
DevSecOps Engineer
Job in
Arlington, Arlington County, Virginia, 22202, USA
Listed on 2026-09-02
Listing for:
Govcio LLC
Full Time
position Listed on 2026-09-02
Job specializations:
-
IT/Tech
Cybersecurity, Cloud Computing: Infrastructure & Operations, SRE/Site Reliability, Security Management & Operations
Job Description & How to Apply Below
GovCIO LLC seeks a Dev Sec Ops Engineer to embed security into modern software delivery for federal customers. You'll design and automate secure CI/CD pipelines, integrate SAST/DAST and container scanning, and build policy-as-code and compliance checks for cloud-native systems. Partner with developers, security, and operations to implement Zero Trust principles, infrastructure as code, and continuous monitoring. You'll troubleshoot vulnerabilities, improve release reliability, and guide teams on secure coding and deployment patterns while supporting mission-critical, high-impact government programs in a collaborative, growth-focused culture.
Responsibilities
- Design, implement, and maintain secure CI/CD pipelines for cloud-native applications
- Integrate SAST, DAST, container, and dependency scanning into automated build and release workflows
- Develop and manage infrastructure as code for secure, compliant cloud environments
- Implement policy-as-code, security gates, and compliance checks aligned with federal standards
- Collaborate with development, security, and operations teams to embed security early in the SDLCAutomate remediation workflows, security testing, and reporting to improve delivery speed and reliability
- Monitor, triage, and resolve security findings and pipeline issues in production and pre-production
- Provide guidance and training on Dev
- Sec
- Ops best practices, secure coding, and Zero Trust principles
Required Skills
- Dev
- Sec
- Ops practices
- CI/CD pipelines (Jenkins/Git
- Lab/Git
- Hub Actions/Azure Dev
- Ops)
- Infrastructure as Code (Terraform/Cloud
- Formation)
- Containerization and orchestration (Docker/Kubernetes)
- Cloud platforms (AWS/Azure/GCP)
- Static and dynamic application security testing (SAST/DAST)
- Software composition analysis and SBOM management
- Security scanning and policy-as-code (e.g., OPA)
- Security automation and scripting (Python/Bash)
- Monitoring, logging, and SIEM integration
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×