Platform Security Engineer (DevSecOps)

ZipStaff is hiring a Platform Security Engineer for our client, a leading government technology consulting firm. You will integrate and enhance security across software delivery pipelines for mission-critical federal defense systems, ensuring compliance with DoW cybersecurity mandates and driving continuous improvement across the CI/CD ecosystem. What You’ll Do:

• Evolve secure CI/CD pipelines by integrating and automating SAST, DAST, SCA and container scanning tools.
• Tune scanners, refine vulnerability thresholds, reduce false positives and optimize remediation workflows.
• Harden IaC templates (Terraform) and enforce policy-as-code across environments.
• Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
• Collaborate with development, operations and security teams; monitor pipelines and support incident response.
• Champion zero trust principles across the SDLC.

• 5+ years of cybersecurity engineering, including DevSecOps in federal or defense environments (IaC/CaC, CI/CD, SDLC).
• 3+ years of software engineering with Python, TypeScript or Bash and automation frameworks.
• 2+ years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
• Experience with AI software development tools such as Claude Code or Codex.
• Experience with Agile and Change Management methodologies.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer and SCAP tools, plus AI/ML security best practices.
• Ability to obtain a Secret clearance.
• HS diploma or GED.

Nice to Have:

• Zero Trust solutions for DevSecOps pipelines and security tool evaluation.
• GRC engineering: policy-as-code, automated compliance validation, continuous control monitoring, POA&M management.
• Active Secret clearance.
• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• Security+, AWS Solutions Architect, AWS Security or CISSP certification.

• Health Insurance.
• Dental Insurance.
• Vision Insurance.
• 401(k) + 401(k) matching.
• Paid time off.
• Referral Program.

About ZipStaff: ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities. To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.