Security Devops Pipelines

Security Devops Pipelines Engineer Jobs

2 jobs found

1d ago

Senior Application Security Engineer - Containers

ADP Alpharetta, GA

Alpharetta, GA

1d ago

$75k - $184k/yr Full time Senior Application Security Container Security

Apply Now

Job Description

ADP offers a hybrid work environment in Alpharetta, GA (also noted: Roseland, NJ) and a comprehensive benefits package designed to support your health, stability, and personal time. You will contribute to container security governance and enable secure development practices through measurable operations, reporting, and DevOps pipeline integration.

This Senior Application Security Engineer - Containers role focuses on building and managing container security scanning services, establishing governance for secure container image use before production, and partnering with teams to strengthen supply chain risk and vulnerability management.

Responsibilities

Drive container security operations, including supply chain risk initiatives across ADP’s different business units.
Build and support security within DevOps pipelines, institutionalizing container image scanning in line with shift-left practices.
Support management of supply chain vulnerabilities, image provenance, adversarial container security, and governance risk and compliance (GRC).
Assist in developing solutions for Container Security Bill of Materials (CSBom) and Vulnerability Exchange (VEX).
Promote secure container development through training, governance, and metrics.
Maintain awareness of container cybersecurity threats and best practices to enable securing and hardening at scale.
Customize policies, rules, and alerts to align with established policies and settings.
Serve as a technical SME to drive program excellence and contribute to continuous improvement.
Identify meaningful KPIs/KRIs to measure progress and drive improvement.
Provide weekly scanning and monitoring reports.
Create and maintain Standard Operating Procedures (SOP).
Perform other duties as required.

Requirements

Basic knowledge and understanding of container security vulnerabilities (OWASP).
Understanding of container image formats such as Docker and OCI.
Experience implementing and rolling out container scanning solutions as part of container development.
Familiarity with internet technologies and web development secure coding best practices.
Understanding of CI/CD pipelines including source control, integration, and deployment (examples include Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk).
Strong analytical and problem-solving skills, with basic cross-functional knowledge across multiple development and security disciplines.
Experience training development teams on secure container practices.
Basic understanding of test automation tools and framework, including the NIST Container Security Framework.
Ability to communicate security concepts to technical and non-technical audiences.
Understanding of Agile methodologies, Cloud, Container, and Application Security.
Ability to work effectively as part of a remote team; self-motivated with a positive attitude.
Bachelor’s degree or equivalent.
Five years or more experience in various IT or cybersecurity roles, with three or more years specifically in software engineering roles.
Familiarity with microservices architecture and design patterns.
Good analytic skills, including qualitative and quantitative data analysis to support data-driven decision-making regarding system threats, vulnerabilities, and risk.
Plus (not required): CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT.

Technologies

OWASP, Docker, OCI
Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk
Java, C#, .Net, JavaScript, Python
NIST Container Security Framework
Container Security Bill of Materials (CSBom), Vulnerability Exchange (VEX)

Benefits

Medical, Dental, Vision
Life Insurance
Matched Retirement Savings
Wellness Program
Short-and Long-Term Disability
Charitable Contribution Match
Holidays
Personal Days & Vacation
Paid Volunteer Time Off

View full job page →

4d ago

Platform Security Engineer

Booz Allen Hamilton McLean, VA

McLean, VA

4d ago

$78k - $176k/yr Full time Cloud Platforms DevSecOps Information Security

Apply Now

Job Description

Platform Security Engineer position in McLean, VA applying DevSecOps to secure software delivery across CI/CD, infrastructure-as-code, and compliance activities.

Responsibilities

Integrate and enhance security within software delivery pipelines using DevSecOps practices
Support secure delivery for mission-critical systems while aligning to Department of War (DoW) cybersecurity mandates and compliance activities
Advance secure CI / CD workflows by integrating and automating SAST, DAST, SCA, and container scanning to meet DoW requirements and reduce operational risk
Improve DevSecOps pipeline security over time by tuning detection thresholds, adjusting scanners, reducing false positives, and optimizing remediation workflows
Harden infrastructure-as-code (IaC) templates, including Terraform, and enforce policy-as-code across environments
Perform risk assessments; contribute to system security plans (SSPs) and continuous ATO efforts
Coordinate with development, operations, and security teams to enable secure software delivery
Monitor pipeline activity for anomalies and assist with responding to security incidents
Champion zero trust principles and support adoption across the SDLC

Requirements

5+ years of experience in cybersecurity engineering, including DevSecOps in federal or defense environments using IaC / CaC, CI / CD, and SDLC concepts
3+ years of software engineering experience using Python, Typescript, or Bash and automation frameworks
2+ years implementing cybersecurity solutions in AWS cloud and container orchestration such as Kubernetes
Experience with AI software development tools including Claude Code, Codex, or Pi
Experience applying Agile and Change Management methodologies
Knowledge of cybersecurity best practices and threat-based cybersecurity frameworks, including AI / ML security best practices
Knowledge of NIST SP 800-53 controls, RMF compliance, eMASS, STIG Manager, STIG Viewer, and SCAP tools
Ability to obtain a Secret clearance
HS diploma or GED

Technologies

DevSecOps, CI / CD, SDLC
SAST, DAST, SCA, container scanning
Terraform, policy-as-code
AWS cloud, Kubernetes
Python, Typescript, Bash
Claude Code, Codex, Pi
NIST SP 800-53, RMF, eMASS
STIG Manager, STIG Viewer, SCAP tools
IaC / CaC, SSPs, ATO

Nice If You Have

Experience reviewing code samples and applying whitelisting or exemption processes
Experience developing Zero Trust security solutions for DevSecOps pipelines
Experience evaluating security tools and assessing fit for inclusion in development or operational environments
Knowledge of GRC engineering practices, including policy-as-code implementation, automated compliance validation, continuous control monitoring, security control mapping (NIST 800-53, RMF, or CIS), risk assessment automation, POA & M management, audit evidence collection, compliance reporting, and integrating GRC requirements into CI / CD and DevSecOps workflows
Excellent verbal, technical writing, and documentation skills
Secret clearance
Bachelor’s degree in Cybersecurity, Computer Science, or related field
Security+, AWS Solutions Architect, AWS Security, or CISSP certifications

AI Usage Policy (Candidate)

Use of AI or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided

Work Model

Onsite: Work will primarily be performed full-time at a customer facility, collaborating directly with colleagues and customers

Security and Identity Verification

Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
Identity verification will use advanced biometrics and AI to ensure authenticity and protect against identity fraud
Interview and assessment participation requires being on camera
Company may take your picture to verify identity and prevent fraud

Location: McLean, VA (onsite)

Salary: USD 77,600 - 176,000 per year

Minimum Experience: 2 years

Education: HS diploma or GED

View full job page →

Security Devops Pipelines Engineer Jobs

Senior Application Security Engineer - Containers

Platform Security Engineer

Get Security Devops Pipelines Engineer Jobs alerts