R&D DevSecOps Engineering Scientist

About the role

This position integrates security practices into the software development lifecycle (SDLC). Key responsibilities include establishing and enhancing secure CI/CD pipelines, implementing security controls, performing vulnerability management, enabling DevSecOps adoption, and participating in incident response.

Responsibilities

• Establish and Enhance Secure CI/CD
• Design, implement, and maintain secure continuous integration/deployment pipelines.
• Develop and enhance automated build, test, and deployment processes.
• Integrate automated security scanning tools.
• Implement Security-as-Code and Policy-as-Code practices.
• Integrate security gates to block vulnerable code from production.
• Infrastructure & Cloud Security
• Implement and maintain security for Infrastructure as Code.
• Configure and enforce network security policies.
• Manage secrets securely using enterprise secret management solutions.
• Harden cloud environments including IAM roles, security groups, and logging.
• Enable basic IaC approaches across project codebases.
• Vulnerability Management & Compliance
• Perform regular security scans and assess results.
• Identify, prioritize, track, and help remediate vulnerabilities.
• Establish vulnerability remediation workflows.
• Coordinate periodic security testing and assessments.
• Automate compliance checks for relevant standards.
• Implement automated compliance controls.
• Maintain audit trails and documentation for security controls.
• Support internal and external security audits.
• Security Enablement & Collaboration
• Partner with development teams to promote secure coding practices.
• Provide security guidance and training to engineers.
• Help squads integrate DevSecOps practices into their workflows.
• Contribute to security policies and standards.
• Incident Response
• Participate in security incident response and investigation.
• Support systems administration duties as needed, including privileged user access to support systems at ARL and partner sites.

Requirements

• Bachelor's degree in engineering, computer or information science, or other applied sciences.
• Three years of experience in DevOps, SRE, or security engineering roles.
• Experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or ArgoCD.
• Experience with continuous integration and deployment systems.
• Proficiency with at least one major cloud platform.
• Experience with Infrastructure as Code methodologies.
• Experience with Linux administration.
• Knowledge of container technologies and container security.
• Familiarity with security scanning and testing methodologies.
• Understanding of security best practices for software development.
• Familiarity with identity and access management principles.
• Strong problem-solving and analytical skills.
• Excellent communication skills with ability to explain security concepts to non-technical audiences.
• Strong documentation skills.
• Must currently hold, or be able to obtain within the first six months of employment, a DoD 8140 compliant security certification (e.g., Security+).

Qualifications

• US Citizen.
• Eligibility for immediate access to classified information at the level appropriate to the project requirements of the position.

Skills

Strong organizational and attention to detail skills, effective time management, and the ability to manage multiple tasks simultaneously are essential. Excellent written and verbal communication skills are also required.

Benefits

UT Austin offers a competitive benefits package that includes:

• 100% employer-paid basic medical coverage
• Retirement contributions
• Paid vacation and sick time
• Paid holidays

Pay

$104,000-$174,000+/negotiable depending on qualifications.