DevSecOps Engineer

Job Description

Job Description

Dark Wolf Solutions is seeking a DevSecOps Engineer to conduct independent comprehensive assessments of the security controls employed within an Information technology (IT) system or deployed software to determine the controls' effectiveness. The successful candidate will perform reviews of security artifacts for system and software authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The successful candidate must have prior experience in assessing tools / applications, systems, and / or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, and protection of communications systems, services, and various types of application technologies is desirable. The successful candidate must be knowledgeable and proficient in DevSecOps activities such as scripting / automation, containerization, and continuous monitoring. A successful candidate will have a strong foundational understanding of NIST, DoD, and DAF cybersecurity focused guidance. This position will be based out of San Antonio, TX with hybrid / remote opportunities. Additional responsibilities include :

Key Responsibilities :

• Provide engineering analysis, security recommendations for design implementation / operational execution.
• Perform container and / or network security vulnerability assessments to identify, evaluate and mitigate security risks, threats, and vulnerabilities.
• Develop and review the Certificate to Field (CtF) or Continuous Authorization to Operate (cATO) Body of Evidence (BoE) to meet DoD and Federal directives.
• Monitor security audit and intrusion detection system logs for system and network anomalies.
• Monitor technical controls to ensure the operational integrity of the system and data.
• Conduct and manage continuous monitoring activities of assigned systems.
• Build automations for continuous monitoring of technical controls.
• Partner with engineers to analyze software, interpret security requirements, and plan effective control implementations.
• Review risk and control matrices and test plans for key controls and determine effectiveness.
• Identify control gaps, review and test the design of existing controls.
• Formulate clear and concise conclusions on internal controls and business process efficiency.
• Recommend and create policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs.
• Provide recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO).
• Review network and systems design to ensure accuracy.
• Ensure the rigorous application of information security / cybersecurity policies, principles, and practices in the delivery of all IT services.

Required Qualifications :

Desired Qualifications :

compliance.

This position is located in San Antonio, TX.

The estimated salary range for this position is $115,000.00 - $145,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO / AA employer Minorities / Women / Veterans / Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.