Container Scanning Engineer Jobs

1 job found

Today

Senior DevSecOps & Software Engineer

ACT1 Federal Arlington, VA

Arlington, VA

Today

$170k - $200k/yr Full time Senior Api Security Application Security

Apply Now

Job Description

ACT1 Federal is 100% employee-owned and has supported the Department of War for nearly thirty years. This role supports defense industrial base assessment work at DASN (DIB) in Arlington, Virginia, with an in-office day schedule and Government-approved DevSecOps and security engineering expectations.

Salary: USD 170,000 - 200,000 per year. Clearance: Current Top Secret and SCI eligibility required. Travel: May require occasional domestic travel.

What You’ll Be Doing

You will deliver senior-level software engineering, DevSecOps, cybersecurity engineering, and implementation support for DASN (DIB) data-management and performance-assessment initiatives. Work includes developing and sustaining software applications and analytic tools used for defense industrial base assessment, from design and build through testing, containerization, securing, and deployment through Government-approved pipelines and environments.

Design, develop, test, document, maintain, and support deployment of software applications, analytic tools, data services, application programming interfaces (APIs), and related components.
Build applications using Python or comparable modern programming languages, frameworks, libraries, and practices aligned to Government-approved technical environments.
Design and implement secure application architectures, including APIs, data integrations, authentication and authorization mechanisms, error handling, logging, monitoring, and performance management.
Containerize applications and services, develop container-orchestration configurations, and support deployment across Government-approved development, testing, staging, and production environments.
Develop and improve CI/CD pipelines, source-code-management practices, artifact-management processes, automated testing, release-management workflows, and deployment automation, as authorized by the Government.
Create infrastructure-as-code artifacts and automation scripts, configuration-management approaches, deployment manifests, and repeatable environment configuration practices for delivery and sustainment.
Support integration with Department of War software factories, enterprise pipelines, cloud services, data platforms, source systems, and other Government-approved technical environments.
Support deployment and sustainment of approved analytics, data engineering, artificial intelligence, machine learning, reporting, and business intelligence applications developed within or provided to DASN (DIB).
Provide technical implementation, documentation, remediation, and coordination support for Government-led Risk Management Framework (RMF) activities.
Implement and document security controls and secure configuration practices, support vulnerability identification and remediation, and support Security Technical Implementation Guide assessment and remediation, continuous monitoring, and authorization-package development.
Produce technical artifacts for Government security review, assessment, authorization-package, and continuous-monitoring activities, including system descriptions, architecture diagrams, control-implementation narratives, configuration documentation, test evidence, and remediation plans.
Perform code reviews and secure software development activities such as static and dynamic application-security testing, dependency analysis, container scanning, and configuration reviews.
Prepare executive briefings, technical memoranda, implementation plans, architecture diagrams, decision packages, status reports, and risk summaries for senior technical and nontechnical stakeholders.
Coordinate technical products and supporting information with DASN (DIB) directorates, ASN (RD&A) offices, DON acquisition organizations, DON enterprise service providers, Department of War stakeholders, cybersecurity organizations, and other Government-approved points of contact as directed by the Government.
Support time-sensitive taskers, technical reviews, executive engagements, and approved working groups associated with software development, DevSecOps, cybersecurity, data, analytics, and industrial-base performance-assessment initiatives.

Required Qualifications

Bachelor’s degree from an accredited institution in a related quantitative discipline, such as data science, statistics, mathematics, economics, operations research, engineering, computer science, business analytics, or a related field.
10+ years of experience in software engineering, DevSecOps, platform engineering, cloud-native application development, cybersecurity engineering, or related technical fields.
Demonstrated experience designing, developing, testing, containerizing, securing, and deploying production software applications.
Demonstrated experience developing or maintaining CI/CD pipelines, source-code-management processes, artifact-management workflows, automated testing, deployment automation, and release-management practices.
Demonstrated experience with Python or a comparable modern programming language.
Demonstrated experience with container technologies, container orchestration, infrastructure as code, configuration management, cloud-native or enterprise application deployment, and automation.
Demonstrated experience with APIs, data integrations, and enterprise application services.
Demonstrated experience supporting RMF technical implementation, security-control implementation, security documentation, vulnerability management, Security Technical Implementation Guide assessment and remediation, or authorization-package development.
Ability to communicate technical risks, implementation status, security findings, architecture decisions, and delivery tradeoffs to senior technical and nontechnical stakeholders.
At least one relevant cybersecurity, cloud-security, DevSecOps, container-security, software-engineering, or Department of War workforce-qualification certification.
May require support outside normal business hours for time-sensitive transaction, interagency, executive, or industrial-base requirements.
Current Top Secret and SCI eligibility required.

Benefits

Medical/Dental/Vision Insurance
ACT1 Employee Stock Ownership Plan (ESOP)
Company Paid Life and AD&D Insurance
Company Paid Short-Term Disability
Voluntary Long-Term Disability
Flexible Spending Accounts (FSA)
Health Savings Account (HSA)
401K with employer match
Paid Time Off
Paid Holidays
Parental Leave
Military Leave
Education, Training & Professional Development
Voluntary Accidental Injury/Critical Illness/Hospital Care
Voluntary Pet Insurance, Legal Resources, and Identity Protection

Technologies

Python
Container technologies
Container orchestration
Infrastructure as code
Configuration management
Artificial intelligence
Machine learning
Application programming interfaces
Static and dynamic application-security testing
Dependency analysis
Container scanning

View full job page →

Get Container Scanning Engineer Jobs alerts

New Container Scanning Engineer Jobs, daily.