Cybersecurity Engineer – DevSecOps

Millennium is proud to be part of the Markon enterprise, a network of specialized organizations united in support of critical national security missions. This partnership strengthens our ability to deliver results by expanding our technical depth, operational reach, and access to a broader bench of proven experts, ensuring our customers continue to receive best-in-class cybersecurity support.

Since 2004, Millennium has operated at the forefront of cybersecurity. Our elite team of over 300 professionals brings an unmatched record of performance across Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. As home to the largest contingent of contracted Red Team operators supporting the Department of Defense, Millennium delivers unparalleled threat intelligence and battle-tested expertise to both DoD and federal civilian customers.

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.

Millennium Corporation is seeking a Cybersecurity Engineer – Dev Sec Ops to support cybersecurity, software assurance, and security engineering activities within a DoD/DoN environment. This position is 100% remote and will focus on integrating cybersecurity throughout the software development and delivery lifecycle, with an emphasis on application security, CI/CD pipeline security, container security, vulnerability management, and DoD cybersecurity compliance.

Candidates located in or near major U.S. Navy installations are preferred, with priority given to candidates in the New Orleans, Orlando, and Washington, DC metropolitan areas. Candidates located near other major Navy facilities may also be considered.

• Conduct code and container vulnerability assessments using approved DoD vulnerability scanning tools, DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and other DoD/DoN software assurance tools.
• Implement and assess operating system security configurations in accordance with applicable DISA STIGs and SRGs.
• Perform cybersecurity assessments, security audits, and risk analyses to identify vulnerabilities and compliance gaps.
• Apply security testing methodologies, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), throughout the software development lifecycle.
• Review and implement cybersecurity policies and security controls within CI/CD pipelines to support secure software delivery and DoD/DoN requirements.
• Serve as a Git Lab security reviewer and approver for merge requests, reviewing security scan results and verifying that identified findings are remediated or appropriately documented through the approved risk-management process prior to release.
• Review Git Lab SAST, dependency, secret detection, and container scanning results; coordinate remediation activities with development teams and track findings through closure.
• Review changes to Git Lab security policies, pipeline controls, and protected branch settings to ensure required security checks and approvals remain properly enforced.
• Provide cybersecurity oversight for containerized workloads using Neu Vector
  , including review of vulnerability findings, admission control decisions, and runtime security alerts.
• Collaborate with application and platform teams to investigate Neu Vector findings, tune security policies, and document remediation actions or accepted risks.
• Ensure security-related provisions within system acquisition and program documentation…