Software Engineer, DevSecOps
AnaVation, San Antonio, TX
What you will do
- Build and maintain CI/CD pipelines (e.g., GitLab CI, Jenkins) for an enterprise consisting of many applications.
- Develop, test, and maintain containerized applications; work with source version control and build/release tooling.
- Develop Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible.
- Automate security control implementation, validation, and evidence collection supporting RMF, ATO, and cATO.
- Integrate and tune pipeline security tooling: SAST, DAST, SCA, container scanning, secrets detection, and policy gates.
- Support security-relevant changes (SRCs), Security Impact Assessments (SIAs), and control validation for embedded value streams.
- Support application/container vulnerability management, whitelisting decisions, and CTF/pipeline compliance so changes do not invalidate the ATO.
- Collaborate with ISSEs, software developers, Value Stream engineers, COT, CPT, and Government stakeholders across sprint cadences.
- Architect logging, monitoring, and telemetry to support continuous monitoring.