DevSecOps Engineer
About the role
Xcelerate Solutions is seeking a DevSecOps Engineer to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry. Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!
Location: Alexandria, VA and Seaside, CA. Clearance: Active Secret.
Responsibilities
- Integrate security into DHRA DevSecOps planning, platforms, toolchains, pipelines, and secure software-development activities.
- Configure and support application-security tools in development pipelines and provide outreach on mandated secure-coding practices.
- Analyze application-security findings, including potential false positives, and provide actionable remediation and risk-reduction recommendations.
- Perform application-security reviews and vulnerability assessments and track findings based on risk and impact.
- Evaluate future capabilities that mature pipeline security, accelerate secure release rates, and improve software-security posture.
- Support software supply-chain risk analysis and approved risk-reduction actions under PWS 5.4.3.
- Apply cybersecurity-engineering methods across security requirements, systems analysis and design, security test and evaluation, hardening, vulnerability testing and scanning, and POA&M remediation.