DevSecOps Engineer - E4 - COS/HSV

$124,800 - $164,320/Yr

Randstad - Colorado Springs, CO

Full-time - Mid Level

Colorado Springs, CO

Administrative and Support Services

About the position

The DevSecOps Engineer will support the Lockheed Martin Rotary Mission Systems (RMS) Command and Control, Battle Management, and Communications (C2BMC) program by focusing on developing and testing patches to address software, hardware, and firmware vulnerabilities. The role emphasizes vulnerability management, including the analysis and remediation of various security vulnerabilities and configurations.

Responsibilities

• Develop and test patches to address software, hardware, and firmware vulnerabilities.
• Manage vulnerabilities, focusing on the analysis and remediation of Information Assurance Vulnerability Management (IAVMs), Cyber Tasking Orders (CTOs), Common Vulnerabilities and Exposures (CVEs), vendor patches, and Security Technical Implementation Guide (STIG) configurations.
• Install and configure Linux operating systems, from system to application level.
• Document and verify all installation and configuration processes in lab environments.
• Create test plans and procedures for software integration and unit testing.
• Collaborate with software developers and vendors to diagnose and identify root causes of issues during system integration.
• Submit problem reports for identified errors following Agile methodologies and coordinate daily integration activities with other Agile Release Trains (ARTs).
• Develop and implement Cyber Releases in the National Team labs, C2BMC Test Facility, and Operations.
• Install and conduct unit testing of Cyber Products.
• Provide feedback, redlines to engineers, and updates to Cyber Leadership as part of the role.
• Document lessons learned, best practices in security engineering, and adhere to industry standards as part of daily responsibilities.

Requirements

• Bachelor's degree in engineering with five or more years of experience or an advanced degree with over three years of experience.
• Proficient in configuring and patching Windows systems using Group Policy Objects (GPO).
• Hands-on experience in scripting, installing, and testing GPOs on Windows hosts within Active Directory environments.
• Experience in writing and deploying GPOs utilizing Advanced Group Policy Management (AGPM).
• Strong understanding of GPOs to manage access control effectively, ensure compliance with organizational policies, and enhance overall network security.
• Technical troubleshooting skills for Commercial Off-The-Shelf (COTS) software applications, combined with data analytics for assessing system vulnerabilities and mission impacts.

Nice-to-haves

• Ability to execute Agile tasks throughout the System Development Lifecycle.
• Hands-on experience with industry-standard cybersecurity tools, including Security Content Automation Protocol (SCAP), NESSUS, and Assured Compliance Assessment Solution (ACAS).
• Proven experience in analyzing and implementing NIST SP 800-53 Security Controls within the Risk Management Framework (RMF) across various phases of mission systems.

Benefits

• Health insurance
• 401K contribution
• Incentive and recognition program