Description
Mission:
As a DevSecOps Engineer, you will work hands on as a member of the Software Assurance Team (SwA) to ensure the secure development of software. You will work with the team to review results from various tools (SonarQube, SonaType, Fortify, etc.) as well as work closely with the development team to remediate vulnerabilities found in the source code, justify false positives, and create containerized versions of our applications.
Responsibilities
- Manage security measures for containerized services using Docker, Kubernetes, and similar technologies.
- Develop and maintain documentation related to DevSecOps processes and tools.
- Monitor security tools in the development pipeline and adjust as necessary to improve automation and effectiveness.
- Collaborate with developers to enforce standards and to identify and mitigate security risks.
- Integrate security tools into CI/CD pipelines to ensure secure deployment practices and minimize vulnerabilities.
- Secure system configurations and install security tools, scan systems in order to determine compliancy and report results and evaluates products and various aspects of system administration.
- Conduct security program audits and develop solutions to mitigate risks.
- Evaluate, develop, and enhance security assessment capabilities.
- Perform vulnerability assessments including development of risk mitigation strategies.
Requirements
- Associate degree with one-year relevant experience or three years relevant experience
- Experience with tools like Azure DevOps, SonarQube, SonaType, Fortify and AWS GovCloud.
- Proficient with Docker, Docker Compose, and orchestration tools i.e. Kubernetes, Docker Swarm.
- Knowledge of scripting languages such as PowerShell.
- Three years’ experience in C# and .NET programming languages.
- Secret security clearance.
- IAT level II baseline certification.
- Computing Environment (CE) certification.
Desired Skills
- Experience with using eMASS for managing RMF records.
- Experience with PowerShell or other scripting languages.
- Experience with Amazon Web Services (AWS) architectures and security.
- Top Secret security clearance with SCI eligibility.
- Experience with Tenable Security Center (SC) and NESSUS; scanning and data analysis.
- Experience with Trellix ePO server and end products; deployment, configuration, troubleshooting and data analysis.
- Experience with STIGing tools; SCAP Compliance Checker, STIG Viewer, and Vulnerator.
- Experience with STIGing multiple technologies (i.e. Windows, AD, VMware, RHEL, CISCO, DNS, Palo Alto).
Skills
security clearance, comptia security +, Clearance, Top Secret, Secret Security Clearance, eMass, certification, accreditation, compliance, inspection, rmf, Risk Management, disa, stig, Information Security, Cyber Security
Top Skills Details
security clearance, CompTIA security +
Additional Skills & Qualifications
This is on the JFFT task. Joint friendly forced tracking.
There are two positions open backfilling Will Calvani and Cam Raynor
Experience Level
Expert Level
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.