Application Security Engineer - Cloud / DevSecOps

Full-time - Senior

Alexandria, VA

Professional, Scientific, and Technical Services

About the position

ASRC Federal NetCentric Technology is seeking a highly skilled and innovative Application Security Engineer - Cloud / DevSecOps to join our team in support of our federal government clients. The successful candidate MUST possess an active Secret Security Clearance. This role will focus on developing and implementing security solutions for multi-cloud environments, ensuring the protection of sensitive client information. The ideal candidate will apply their expertise in container security and orchestration, collaborate with cross-functional teams, and drive compliance and security enhancements across the enterprise. Although this position is remote, a local Application Security Engineer - Cloud / DevSecOps in the Alexandria, Virginia area is preferred due to occasional onsite requirements.

Responsibilities

• Develop and implement security solutions for multi-cloud environments with a focus on container security and orchestration.
• Collaborate with cross-functional teams to design, build, and enhance integrated security solutions and user-focused features.
• Evaluate, implement, and manage third-party cloud security tools and compliance measures.
• Lead the development of SOPs, guidelines, and documentation for secure cloud operations and containerized environments.
• Ensure enterprise application security compliance with NIST 800-53 controls, STIG standards, and vulnerability management.
• Perform risk assessments, remediation, and vulnerability scans to strengthen security posture.
• Drive DevSecOps integration and provide support for cloud migrations and cyber operations.
• Develop technology roadmaps and recommend strategic security advancements for long-term success.

Requirements

• Active Secret Clearance
• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• Active DoD 8570 IAT Level II certification or greater, including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISA, CISSP (or Associate)
• 7+ years of relevant IT or Cybersecurity experience, with at least 3 years of direct expertise in multi-cloud platforms (AWS, Azure, Google Cloud), containerization technologies (Kubernetes, Docker), and DevSecOps practices.
• RedHat Advanced Cluster Security for Kubernetes experience.
• DevSecOps knowledge and experience.
• Hands-on experience in scripting such as Python, or Bash and configuration automation tools, such as Ansible, Puppet or Chef.
• Hands-on experience in CI/CD tools such as GitLab, CI/CD or Jenkins.
• Expertise in cybersecurity frameworks (NIST 800-53, STIGs), risk assessment, vulnerability management, and compliance.
• Proven skills in enterprise-level architecture and implementing secure systems for large-scale organizations.
• Onsite travel to Alexandria, Virginia will be occasionally required.

Benefits

• Comprehensive plans for medical, dental, vision, life insurance, and short-term/long-term disability
• Inclusive policies for bereavement, military obligations, and parental needs, along with 11 paid holidays annually
• A 401(k) plan with a generous company match and immediate vesting
• Employee referral bonuses
• Professional development program including funding for degrees and certifications
• Centers of Excellence for professional development and collaboration