Experience with Linux, Windows Server, and MacOS
Experience with monitoring and logging tools such as Crowdstrike, Splunk, or ServiceNow
Experience with Chainguard images or hardened container base images for supply chain security
Experience with artifact and container registries such as Sonatype Nexus and JFrog Artifactory for image storage and dependency management
Experience embedding security into CI/CD pipelines such as shift-left, including SAST, DAST, and SCA, infrastructure-as-code scanning, container image scanning, and policy-as-code gates
Experience with GitHub DevSecOps workflows, including Actions and CI security jobs, branch protection, CODEOWNERS, required reviews, secret scanning, and Dependabot
Experience securing cloud-native delivery platforms such as AWS, Docker, or Kubernetes used by development teams, including admission controls and network policies
Experience with identity and access management, including secure communication protocols, HTTPS, TLS, SSL, SSH, SSO, MFA, RBAC, and identity federation
Ability to obtain a Secret clearance
Bachelor's degree and 1+ years of experience with software development, DevSecOps, or cyber automation or 5+ years of experience with software development, DevSecOps, or cyber automation in lieu of a degree
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.