DevSecOps Engineer

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.

We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded.

The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Responsibilities and Duties:

• Design, implement, and maintain secure Dev Sec Ops  pipelines that integrate security throughout the Software Development Lifecycle (SDLC).
• Lead the implementation of security controls and automation solutions supporting Digital Solution Development, Automation, and Infrastructure Support initiatives.
• Develop and maintain Continuous Integration/Continuous Delivery (CI/CD) pipelines to support rapid and secure software delivery.
• Integrate automated security testing tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and container security scanning.
• Collaborate with application developers, architects, cybersecurity personnel, and infrastructure teams to embed security requirements into system designs and development processes.
• Establish and enforce secure coding practices, vulnerability management procedures, and Dev Sec Ops  best practices.
• Support cloud security architecture and automation efforts across cloud-hosted and hybrid environments.
• Design and implement Infrastructure as Code (IaC) solutions using modern automation tools and frameworks.
• Conduct security assessments, code reviews, architecture reviews, and risk analyses for applications and infrastructure platforms.
• Monitor, analyze, and remediate security vulnerabilities identified through automated scanning and assessment tools.
• Develop and maintain security baselines, secure configuration standards, and deployment templates.
• Support containerization and orchestration technologies, including security hardening and compliance monitoring activities.
• Lead security-related technical projects and provide technical guidance to project teams and stakeholders.
• Collaborate with system administrators, network engineers, and developers to ensure secure deployment and operation of enterprise systems.
• Support Authority to Operate (ATO), FISMA, NIST, FedRAMP, and other compliance-related activities as applicable.
• Develop security automation capabilities to improve detection, response, monitoring, and reporting functions.
• Participate in incident response, root cause analysis, and corrective action planning activities.
• Mentor junior engineers and provide technical leadership on information security initiatives.
• Create and maintain technical documentation, architecture diagrams, operational procedures, and security implementation guides.
• Evaluate emerging Dev Sec Ops , cloud, and security technologies and recommend improvements to organizational security posture.
• Support enterprise modernization, automation, and digital transformation initiatives by ensuring security is integrated from design through deployment.
• Develop security metrics, dashboards, and reports to communicate program health, risk posture, and compliance status to leadership.

Basic Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related field.
• Minimum of eight (8) years of progressive experience in information security, cybersecurity engineering, or related disciplines. Minimum of two (2) years of experience providing technical leadership for information security projects.
• Experience supporting DoD…