DevSecOps Engineer

Job Summary

To support a leading government-focused technology organization, the remote DevSecOps Engineer (Vulnerability Management) will analyze and triage vulnerability findings, partner with engineering teams for remediation, and manage container and Kubernetes security in a long-term contract role.

Key responsibilities

• Analyze and prioritize vulnerability findings based on risk and operational impact
• Collaborate with engineering teams to remediate vulnerabilities in React and NodeJS applications
• Manage container and Kubernetes (EKS) security, ensuring compliance with standards like FedRAMP and NIST 800-53

Required qualifications

• Hands-on experience in AWS GovCloud with knowledge of cloud security and compliance
• Strong expertise in Kubernetes security (EKS) and container security best practices
• Experience in remediating vulnerabilities in JavaScript-based applications, particularly React and NodeJS
• Familiarity with vulnerability management tools such as Tenable, Qualys, or Aqua
• Ability to clearly communicate security findings and translate them into actionable tasks