The Role
Designs, implements, and operates secure CI/CD pipelines, cloud infrastructure, infrastructure-as-code, automated security testing, and security controls. Integrates vulnerability management, policy-as-code, threat modeling, compliance, and incident remediation into software delivery. Partners with developers, architects, platform teams, cybersecurity professionals, and compliance stakeholders to improve secure coding, automation, documentation, and security architecture. Requires two onsite days weekly in Rosslyn, Virginia, U.S. citizenship, and an active Secret clearance.
Summary Generated by Built In
SAIC has an opportunity for a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. This role will design, implement, and operate secure CI/CD pipelines, cloud infrastructure, automation, and security controls that enable development teams to deliver reliable software quickly and safely. The ideal candidate combines hands-on engineering expertise with a strong understanding of application security, cloud security, infrastructure as code, and modern software delivery practices. This role partners closely with software engineers, platform teams, architects, cybersecurity teams, and compliance stakeholders.
This role requires 2 day each week onsite in Rosslyn, VA.
Key Responsibilities:
- Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.
- Embed automated security testing into the software development lifecycle, including static application security testing, dynamic testing, software composition analysis, container scanning, and secrets detection.
- Develop and manage infrastructure as code using tools such as Terraform, CloudFormation, or Ansible.
- Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.
- Establish and enforce policy-as-code, secure configuration standards, and deployment guardrails.
- Integrate vulnerability management findings into engineering workflows and support timely remediation.
- Partner with development teams to identify security risks, perform threat modeling, and improve secure coding practices.
- Automate security, compliance, and operational processes to improve consistency and reduce manual effort.
- Monitor pipeline, infrastructure, and application security events; support investigation and remediation of security incidents.
- Maintain technical documentation, runbooks, architecture diagrams, and control evidence.
- Contribute to security architecture reviews, technology evaluations, and continuous improvement initiatives.
- Support compliance with applicable organizational policies, contractual requirements, and regulatory frameworks.
Required Education & Experience:
- Bachelors and 5+ years or more experience; Masters and 3+ years; may accept additional experience in lieu of degree.
- Demonstrated experience integrating security into CI/CD pipelines and cloud infrastructure.
- Proficiency with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
- Strong understanding of application security, cloud security, and secure software delivery practices.
- Ability to implement and manage automated security testing within the software development lifecycle.
- Experience collaborating with cross-functional teams including developers, architects, and cybersecurity professionals.
- Familiarity with regulatory compliance frameworks and organizational security policies.
Required Clearance:
- US Citizenship.
- Active secret clearance.
We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.
Skills Required
- Bachelor’s degree and 5 or more years of experience, or master’s degree and 3 or more years of experience; additional experience may substitute for a degree
- Experience integrating security into CI/CD pipelines and cloud infrastructure
- Proficiency with Terraform, CloudFormation, or Ansible
- Strong understanding of application security, cloud security, and secure software delivery practices
- Experience implementing and managing automated security testing within the software development lifecycle
- Experience collaborating with developers, architects, and cybersecurity professionals
- Familiarity with regulatory compliance frameworks and organizational security policies
- U.S. citizenship
- Active Secret security clearance
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Spectrum San Diego is a high tech security innovator, specializing in ultra-low-dose X-ray screening systems.
