Logo for TISTA Science and Technology Corporation

DevSecOps Engineer / Security Specialist

Role overview

Qualifications

  • 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems
  • Security tooling in CI/CD pipelines (SAST/DAST, dependency and container scanning)
  • Vulnerability scanning and remediation tracking (ACAS/Nessus)
  • Bachelor's degree in computer science, cybersecurity or a related field

Responsibilities

  • Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD (GitHub, GitLab, Jenkins, SonarQube)
  • Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift
  • Run vulnerability scans (ACAS/Nessus), track remediation and meet CISA BOD 22-01 timelines
  • Produce and maintain ATO evidence: SSP sections, POA&Ms and control documentation

Key facts

Hard skills

Other skills

  • Teamwork
  • Problem Solving

About the company

TISTA Science and Technology Corporation logo

TISTA Science and Technology Corporation

  • IT Services & Consulting
  • Large
  • 1,001–5,000
TISTA Science and Technology Corporation, a CMMI Level 3 company, focuses on delivering information technology (IT) and professional services to Federal and State agencies, and to various commercial clients. TISTA is an Inc. 500 company, a recipient of the 2010 “Top 100 Service-Disabled Veteran-Owned Businesses," “Top 100 8(a) Business“ awards from Diversity Business, 2012 “Top 100 Privately-held Businesses in Maryland," and recognized in Washington Technology’s FAST 50 list of the fastest-growing small businesses in government contracting in 2012. We offer expertise in cyber security, software, and database development, engineering support, network, and critical infrastructure protection, IT operations and maintenance, information assurance, identity, and access management, certification & accreditation, enterprise security, disaster recovery planning, continuity of operations (COOP), risk management, IT architecture, IT Security Training Services, and Program Management.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Overview:

TISTA Science and Technology is seeking a DevSecOps Engineer / Security Specialist to join our growing team.

At TISTA, you’ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We’re proud to serve and hire Veterans, and we put people first in everything we do.

TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account & Flexible Savings Account, Paid Life Insurance, Short-term & Long-term Disability, 401K Match, Tuition Reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!

Responsibilities:
  • Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD (GitHub, GitLab, Jenkins, SonarQube).
  • Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift.
  • Run vulnerability scans (ACAS/Nessus), track remediation and meet CISA BOD 22-01 timelines.
  • Produce and maintain ATO evidence: SSP sections, POA&Ms and control documentation.
  • Security QA variant: validate controls before release, run WASA and Fortify scans, and sign off on security release criteria.
Qualifications:
  • 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems (Mid / Level II).
  • Security tooling in CI/CD pipelines (SAST/DAST, dependency and container scanning).
  • Vulnerability scanning and remediation tracking (ACAS/Nessus).

Desired Skills:

  • Ansible hardening and STIG compliance on RHEL and OpenShift.
  • ATO evidence: SSP sections, POA&Ms, control documentation.
  • Security QA option: Fortify and WASA scans, release security sign-off.

Education:

  • Bachelor's degree in computer science, cybersecurity or a related field.
  • One of: AWS or Azure Solutions Architect or Developer; ISC2 CISSP.
  • Red Hat Certified Specialist in Ansible preferred; Security QA option: CISSP, CAP or Security+.

Clearance:

  • Must be able to obtain a Tier 2 / Moderate Risk Public Trust and a VA PIV credential.

Location: 

  • Remote, USA. 

Pay Range:

  • The suggested pay for this position ranges from $95,546 to $125,875.
  • The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.
  • Also, certain positions are eligible for additional forms of compensation, such as bonuses.
  • TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/

Related jobs

See all DevSecOps Engineer jobs

Other jobs at TISTA Science and Technology Corporation