DevSecOps Analyst

• Support planning, coordination, implementation, and maintenance of enterprise information security capabilities.
• Administer enterprise security infrastructure supporting LAN, WAN, cloud, and hybrid environments.
• Design, implement, and maintain network security controls.
• Develop, review, and maintain firewall policies, NAT rules, VPN configurations, security zones, and access control lists.
• Perform firewall software upgrades, patch management, and configuration maintenance.
• Administer Intrusion Detection and Prevention Systems (IDS/IPS).
• Administer centralized log aggregation and Security Information and Event Management (SIEM) platforms.
• Support web filtering and secure web gateway technologies.
• Maintain file integrity monitoring solutions.
• Investigate Data Loss Prevention (DLP) alerts and resolve DLP policy issues.
• Assist in incident response activities involving network, endpoint, and application security.

 

• Design, develop, maintain, and improve enterprise CI/CD pipelines.
• Implement automated build, test, security validation, packaging, and deployment workflows.
• Support enterprise CI/CD platforms including:
• Jenkins
• GitLab CI/CD
• GitHub Actions
• Automate application deployment across development, testing, staging, and production environments.
• Support Git-based source control management, branching strategies, and release management.
• Troubleshoot pipeline failures and deployment issues.
• Optimize pipeline performance and automation efficiency.

 

• Develop Infrastructure as Code (IaC) using Terraform.
• Develop system automation using Ansible.
• Automate infrastructure provisioning and configuration management.
• Build reusable infrastructure modules and deployment templates.
• Support enterprise platform modernization initiatives.
• Automate routine administrative and operational activities.
• Standardize infrastructure deployments across multiple environments.

 

• Support Docker-based application deployments.
• Administer Kubernetes clusters.
• Support Rancher-managed Kubernetes environments.
• Manage enterprise container registries.
• Implement container security best practices.
• Perform image vulnerability scanning and remediation.
• Support runtime container security initiatives.
• Assist application teams with container migration and deployment.
• Troubleshoot containerized applications and orchestration environments.

 

• Integrate security testing throughout the SDLC.
• Configure and maintain:
• OpenText Fortify (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Secrets Scanning
• Review vulnerability scan findings.
• Collaborate with developers to remediate security findings.
• Implement automated security gates within CI/CD pipelines.
• Promote secure coding practices.
• Support software assurance initiatives.
• Assist with threat modeling and application risk assessments.

 

• Administer Tenable Security Center (SC).
• Administer Nessus vulnerability scanners.
• Perform authenticated and unauthenticated vulnerability assessments.
• Analyze vulnerability results.
• Track remediation activities.
• Conduct risk assessments.
• Coordinate vulnerability remediation with infrastructure and application teams.
• Support compliance reporting and continuous monitoring.
• Support CISA Binding Operational Directives (BODs), CVEs, and vulnerability remediation efforts.
• Assist with penetration testing remediation activities.

 

Support software lifecycle management activities for:

• NSITES III operational tools
• Standard enterprise software deployments
• Optional licensed software
• Customer-requested software
• Enterprise software platforms

Responsibilities include:

• Software packaging
• Software testing
• Version control
• Patch validation
• Vulnerability remediation
• Change management
• Continuous Integration
• Software maintenance
• Software deployment
• Lifecycle documentation

Support software enhancements, maintenance, and security updates for:

• Java Runtime Environment
• Enterprise software platforms
• Hardware drivers
• Custom applications
• Commercial Off-The-Shelf (COTS) software

Support remediation of software vulnerabilities with:

• CVSS v4 scores of 7.0 or higher
• CISA Binding Operational Directives (BODs)
• Audit findings
• Penetration testing findings

 

 

Support compliance with:

• FISMA
• NIST Cybersecurity Framework (CSF)
• NIST Risk Management Framework (RMF)
• NIST SP 800-53
• NIH Information Security Policies
• HHS Information Security Requirements
• CISA Binding Operational Directives (BODs)
• Secure Software Development Framework (SSDF)
• Federal Secure Software Supply Chain requirements

Assist with:

• Security documentation
• Audit preparation
• Risk assessments
• Security control implementation
• Continuous monitoring
• Authority to Operate (ATO) activities

• Bachelor’s degree in Computer Science, Information Technology Management, or Engineering. Alternatively, four years of related experience may substitute for the educational requirement.

• 3-7 years of experience in Windows system administration in enterprise environments
• Experience supporting large-scale Data Center operations
• Experience supporting multi-platform environments (Windows, Linux, virtualization, storage, and database systems)