DevOps Security Engineer
Listed on 2026-10-14
-
IT/Tech
Cybersecurity, Cloud Computing: Infrastructure & Operations, Information Security & Data Protection, Systems Engineer
Job Title:
Dev Ops Security Engineer-Defense
Location:
Dallas, TX (Hybrid role , NO REMOTE option) In-Office presence REQUIRED Note :
This role is open to US Citizens who have a 'security clearance' or can be clearable Blue Yonder Defense Solutions (BYDS) is seeking a Dev Sec Ops Engineer to help integrate security practices into our software development and Dev Ops processes within our product development teams who support DOD or other Government customers. This role will work closely with development, QA, and operations teams to build and maintain secure CI/CD pipelines, automate security testing, and ensure our platforms and applications meet enterprise security standards.
The ideal candidate is passionate about automation, cloud-native security, and secure software delivery, and has experience embedding security into modern Dev Ops environments.
- Dev Sec Ops Implementation Design and implement security controls within CI/CD pipelines to ensure secure software delivery.
- Integrate automated security testing tools such as SAST, DAST, SCA, and container scanning.
- Embed security checks into build and deployment processes to identify vulnerabilities early in the SDLC.
- Platform & Infrastructure Security
- Work with Dev Ops teams to secure cloud infrastructure, containers, and Kubernetes environments.
- Implement Infrastructure-as-Code security scanning and policy enforcement.
- Automation & Tooling
- Develop automation scripts and integrations to support security workflows.
- Maintain and enhance CI/CD platforms and pipeline security tooling.
- Integrate vulnerability management tools with development workflows.
- Collaboration
- Partner with developers and QA teams to promote secure coding practices.
- Assist engineering teams in remediating vulnerabilities identified during testing and scanning.
- Collaborate with internal and customer security teams to implement organizational security standards.
- Compliance & Governance
- Support security compliance requirements such as SOC2, FedRAMP, or DoD security standards where applicable.
- Assist with security audits and vulnerability remediation tracking.
- Help maintain documentation of Dev Sec Ops processes and controls.
- 3–6 years of experience in Dev Ops, Dev Sec Ops , or security engineering.
- Experience building and maintaining CI/CD pipelines (Git Hub Actions, Jenkins, Git Lab CI, or similar).
- Familiarity with cloud platforms such as AWS, Azure, or GCP.
- Experience with container technologies (Docker, Kubernetes).
- Understanding of secure software development lifecycle (SSDLC) practices.
- Experience integrating security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Container vulnerability scanning
- Scripting experience (Python, Bash, or similar).
- Familiarity with Infrastructure as Code tools (Ansible, Terraform, Cloud Formation, etc.).
- Experience implementing Dev Sec Ops practices in enterprise software environments.
- Knowledge of container and Kubernetes security best practices.
- Experience with secrets management solutions (Vault, AWS Secrets Manager, Azure Key Vault).
- Familiarity with security frameworks such as NIST, CIS Benchmarks, OWASP Top 10
- Experience supporting government or regulated environments (FedRAMP, DoD Impact Levels, etc.).
- Security certifications such as Security+, CISSP (associate level), Certified Kubernetes Security Specialist (CKS)
- Dev Sec Ops and secure SDLC
- CI/CD automation
- Cloud security
- Container and Kubernetes security
- Vulnerability management
- Infrastructure as Code Security tooling integration
- Must be well versed in working with a diverse group of stakeholders - business…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).