Site Reliability Engineer

• We are seeking a technically skilled and compliance-driven DevSecOps Security Analyst to support DevOps work and cybersecurity operations for federal government contracts.
• This role emphasizes hands-on implementation of system scan policies, configuration of monitoring tools, audit reporting, and identity and access management.
• The analyst will ensure systems meet federal cybersecurity standards, while contributing to risk management and continuous monitoring efforts.
• Develop, configure, and maintain system scan policies using tools such as Nessus, ACAS, and SCAP or the like.
• Ensure scans align with federal vulnerability management requirements.
• Deploy and manage security monitoring tools (e.g., Splunk, ArcSight, SolarWinds, Google Security Command Center) to support real-time threat detection and log aggregation.
• Generate, analyze, and review audit logs and security reports to identify anomalies and ensure compliance with DHS internal control requirements.
• Manage identity and access controls using platforms such as Okta, Google Workspace IAM, and Active Directory.
• Ensure least privilege and role-based access policies are enforced.
• Configure and run static and dynamic application security testing tools including Checkmarx, Fortify, Invicti, and WebInspect.
• Analyze results and coordinate remediation with development teams.
• Use tools like DbProtect to scan and assess database configurations, permissions, and vulnerabilities.
• Apply and evaluate NIST SP 800-53 Rev. 5 controls; support control testing and documentation for A&A packages and continuous monitoring.
• Assist in identifying vulnerabilities and tracking remediation efforts through Plans of Action and Milestones (POA&Ms).
• Maintain system security documentation including SSPs, boundary diagrams, and scan results; communicate findings to stakeholders and technical teams.
• Contribute to incident investigations and post-incident reviews; assist in implementing corrective actions and updating audit trails.
• Evaluate and secure AI/ML applications and pipelines; implement controls for model integrity, data privacy, and adversarial threat mitigation.

DevSecOps Engineer

Data Reliability Engineer

Rechtsreferendar – Anwaltsstation, Wahlstation, Legal Tech

Technical Leader – Probabilistic Risk and Reliability Engineering

DevSecOps Engineer

Cyber DevSecOps Engineer