DevSecOps Application Security Specialist (Remote)

$107,659 - $151,100/Yr

Deloitte - Tallahassee, FL

Full-time - Mid Level

Remote - Tallahassee, FL

10,001+ employees

Professional, Scientific, and Technical Services

About the position

The DevSecOps Application Security Specialist at Deloitte will play a crucial role in enhancing the security tools integrated into the CI/CD pipeline for government agencies as part of an IT modernization program. This position is part of Deloitte's Government and Public Services Cyber Practice, which focuses on creating a cyber-minded culture and implementing innovative security solutions across various sectors. The role offers opportunities to work with cutting-edge cybersecurity tools and to grow both vertically and horizontally within the organization.

Responsibilities

• Provide expertise to support and enhance security tools integrated into the CI/CD pipeline.
• Assess vulnerabilities within Nessus and implement security measures accordingly.
• Work with access controls such as SAML, OAUTH2, and OpenID Connect.
• Implement and manage container security in compliance with NIST 800-190 guidelines.
• Collaborate with teams to architect and implement next-generation security controls.

Requirements

• Bachelor's degree required.
• Must be legally authorized to work in the United States without the need for employer sponsorship.
• 2+ years of experience as a Software Developer with a focus on security architecture.
• 2+ years of experience assessing vulnerabilities using Nessus.
• 2+ years of experience working with access controls such as SAML, OAUTH2, and OpenID Connect.
• 2+ years of experience with container security.

Nice-to-haves

• Prior professional services or federal consulting experience.
• Experience with Prisma Cloud.
• Experience in mobile and endpoint security.
• Certifications such as CompTIA Security+, CEH, CISSP.

Benefits

• Competitive salary range of $107,659 - $151,100.
• Opportunities for professional development and growth.
• Access to cutting-edge cybersecurity tools and technologies.