- Company Name
- MetroStar
- Job Title
- Sr. DevSecOps Engineer II (6296)
- Job Description
-
Job Title: Sr. DevSecOps Engineer II
Role Summary:
Drive integration of security throughout the software development and operations lifecycle by designing, implementing, and maintaining secure CI/CD pipelines, IaC, and cloud infrastructure. Manage threat detection, incident response, and secure coding guidance to ensure all delivered solutions meet security and compliance standards.
Expectations:
- Lead secure DevOps engineering for high‑value, regulated environments.
- Maintain continuous security posture through automated testing and vulnerability management.
- Operate with active TS/SCI clearance and comply with security policies.
Key Responsibilities:
- Collaborate with development, operations, and security teams to embed security into every phase of the SDLC.
- Design, implement, and maintain CI/CD pipelines incorporating automated security testing, vulnerability scanning, and compliance verification.
- Develop and manage IaC templates (Terraform, CloudFormation, Ansible) with embedded security controls for cloud resources (AWS, Azure, GCP).
- Conduct regular security assessments, code reviews, and penetration tests to identify and remediate vulnerabilities.
- Monitor system and application logs, analyze incidents, and respond to security events in a timely manner.
- Implement and oversee IAM solutions, ensuring proper authentication and authorization for users, services, and third‑party integrations.
- Provide secure coding guidance to software engineers and lead remediation of identified security findings.
- Participate in incident response activities and coordinate investigations of security incidents.
- Draft, review, and update security policies, procedures, and documentation.
Required Skills:
- 7+ years of experience in DevSecOps or equivalent roles focused on security integration.
- Proven expertise with CI/CD tools (Jenkins, GitLab CI/CD, Artifactory, SonarQube, Selenium, Fortify, Acunetix, Prisma Cloud).
- Advanced knowledge of IaC tools (Terraform, CloudFormation, Ansible) and secure configuration best practices.
- Deep experience securing cloud environments across AWS, Azure, and GCP.
- Proficiency in scripting languages such as Python and Bash for automation and tool integration.
- Strong understanding of vulnerability management, threat modeling, and incident response.
- Ability to analyze logs, detect anomalies, and orchestrate mitigation strategies.
- Excellent collaboration, documentation, and communication skills.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent professional experience).
- Active TS/SCI clearance with CI polygraph.
- Relevant certifications (e.g., AWS Certified Security – Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, Certified DevSecOps Professional, OSCP) strongly preferred.
Tysons corner, United states
On site
Senior
30-12-2025