Description

You will integrate security testing into CI/CD pipelines and automate compliance workflows for NIST frameworks.

This role is on-site.

Responsibilities

• Implement test-driven security within CI/CD workflows to support DevSecOps initiatives.
• Develop automation for the NIST Risk Management Framework, specifically SP800-37 and SP800-53/53a.
• Track Plan of Action and Milestones (POA&Ms) to remediate security vulnerabilities and compliance gaps.
• Document repeatable processes and train team members on performing automated assessment reviews.

Required Skills

• 5+ years of professional experience in software engineering or DevOps.
• Hands-on experience building and maintaining CI/CD pipelines.
• Proficiency in Python, Ruby, or Java.
• Experience with PowerShell scripting and JSON data handling.
• Cloud platform experience with AWS, Azure, or GCP.
• Deep knowledge of NIST SP800-37 and SP800-53/53a frameworks.
• Ability to manage POA&Ms and compliance workflows effectively.

Preferred Skills

• Any graduate degree.

Key Skills

Education

ANY GRADUATE