MetroStar is currently looking to hire a Sr. DevSecOps Engineer on a full time, permanent basis. This opportunity must be worked onsite in either Washington D.C., Colorado Springs, CO, Tampa, FL, San Antonio, TX, or Huntsville, AL and requires an active TS/SCI w/ CI Polygraph security clearance.

Title : Senior DevSecOps Engineer

Location : Washington, D.C. or Colorado Springs, CO or Tampa, FL or San Antonio, TX, or Huntsville, AL

Summary:

As a Sr. DevSecOps Engineer, you’ll play a critical role in designing, implementing, and maintaining secure and efficient software development and deployment pipelines. You will collaborate with cross-functional teams to integrate security practices seamlessly into the development and operations lifecycle, ensuring the delivery of high-quality, secure, and reliable software solutions.

Responsibilities :

• Collaborate with development, operations, and security teams to integrate security practices into the software development lifecycle.
• Design, implement, and maintain CI/CD pipelines that incorporate automated security testing, vulnerability scanning, and compliance checks.
• Develop and maintain infrastructure as code (IaC) templates and configurations, ensuring security best practices are applied to cloud resources and infrastructure components.
• Perform regular security assessments, code reviews, and penetration testing to identify and address vulnerabilities and weaknesses in applications, code, and infrastructure.
• Monitor and analyze system and application logs to detect and respond to security incidents.
• Implement and manage identity and access management (IAM) solutions, ensuring appropriate authentication and authorization mechanisms are in place.
• Collaborate with software engineers to provide guidance on secure coding practices and assist in remediation of security findings.
• Participate in incident response activities, helping to investigate and mitigate security incidents in a timely manner.
• Contribute to the development and maintenance of security policies, procedures, and documentation.

Qualifications:

• Active TS/SCI Clearance with CI poly
• At least 10 years of experience as a DevSecOps Engineer or similar role, with a focus on integrating security into the software development lifecycle.
• Experience building DevSecOps solutions at scale across multiple classification domains (IL5 to IL6 ) simultaneously
• Expert understanding of DevOps practices, CI/CD pipelines, and automation tools (e.g., Jenkins, GitLab CI/CD, Artifactory, SonarQube, Selenium).
• Strong experience with infrastructure as code (IaC) tools such as Terraform, CloudFormation, or Ansible.
• Expert understanding of AWS and familiarity with other cloud platforms (e.g., Azure, GCP) and securing cloud-based applications and services.
• Solid understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes, OpenShift, EKS) and securing containerized applications.
• Hands-on experience with security tools for static code analysis, dynamic application security testing (DAST), and vulnerability scanning, using tools such as Fortify, Acunetix, and Prisma Cloud
• Expert proficiency in scripting languages (e.g., Python, Bash) for automation and tool integration.
• Knowledge of security best practices, common vulnerabilities, and exposure to security frameworks (e.g., OWASP, NIST).
• Strong problem-solving skills and the ability to work effectively in a fast-paced, collaborative environment.
• Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to technical and non-technical stakeholders.