Apply on Employer Site

Modern Technology Solutions, Inc. (MTSI) · 1 day ago

DevSecOps Engineer

Wright-Patterson Air Force Base, OH

Full-time

Onsite

Senior Level

5+ years exp

Modern Technology Solutions, Inc. (MTSI) is seeking a highly motivated and experienced DevSecOps Engineer to join their dynamic and growing team. The role involves building and maintaining a secure software development lifecycle by collaborating with development, operations, and security teams to automate security practices and integrate security tools into the CI/CD pipeline.

Information Technology

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Automate security testing, vulnerability scanning, and compliance checks within the CI/CD pipeline

Securely manage CI infrastructure using IaC principles, ensuring security best practices are implemented from the start

Integrate and manage various security tools, including SAST, DAST, SCA, and infrastructure security scanners

Participate in security incident response, including investigation, containment, and remediation

Assist with compliance audits (e.g., SOC 2, PCI DSS, HIPAA) by providing evidence and automating compliance checks

Promote security awareness and provide training to development and operations teams

Implement and maintain security monitoring solutions to detect and respond to security threats

Continuously improve security practices and automation, keeping up with the latest security threats and technologies

Collaborate effectively with development, operations, and security teams to achieve shared goals

Create and maintain clear and concise documentation for security procedures and best practices

Continuously learn about the latest security trends, tools, and techniques

Qualification

DevSecOps experienceCI/CD pipelinesSecurity tools integrationContainerization DockerContainerization KubernetesScripting languages PythonScripting languages BashScripting languages GoSecurity principlesAnalytical skillsSecurity certificationsCloud platforms AWSCloud platforms AzureCloud platforms GCPCompliance frameworksSecurity monitoring toolsInfrastructure as Code toolsCommunication skillsCollaboration skills