Lead DevSecOps Engineer

Description

Background Information:

Innovative Defense Technologies (IDT), provider of cutting-edge cloud-based integration, automated testing and data analysis for complex, mission-critical systems in the US Department of Defense (DOD), is seeking a Lead DevSecOps Engineer to be based in our Fall River, MA office. Leveraging advanced software automation, model-based systems engineering (MBSE), and AI-driven capabilities, IDT accelerates capability development, enhances operational readiness, and reduces lifecycle costs for the Department of Defense. The company is dedicated to transforming defense systems through innovation, efficiency, and mission-critical results.

Overview:

We are seeking a highly skilled and motivated Lead DevSecOps Engineer with a proven track record in both project management and cybersecurity leadership, specifically within DevSecOp environments. This role requires a dynamic professional who is equally comfortable engaging with high-value customers and leading internal teams to deliver innovative, secure, and scalable solutions. The ideal candidate will possess deep expertise in DevSecOps practices, extensive familiarity with CI/CD pipelines, and hands-on experience in assessing software vulnerabilities and providing actionable risk recommendations.

All applicants must currently possess an active U.S. Security Clearance .

Responsibilities Include:

• Vulnerability Assessment: Conduct and manage comprehensive assessments of software and infrastructure for security vulnerabilities using industry-standard tools and methodologies. Work with software development teams to identify vulnerability remediation approaches.
• Customer Engagement: Serve as the primary point of contact for high-value clients, building strong relationships through frequent and transparent communication, understanding their security objectives, and translating requirements into actionable project plans.
• DevSecOps Integration: Oversee the integration of cybersecurity principles into DevSecOps processes, promoting a 'security by design' framework throughout all development and operations cycles.
• DevSecOps and CI/CD Practices: Champion DevSecOps methodologies by embedding security controls and automated testing within CI/CD pipelines, ensuring rapid, safe, and compliant code delivery.

Minimum Required Qualifications:

• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or a related technical field or equivalent full-time professional experience.
• 8 years of experience in cybersecurity or related technical roles, including 3-5 years of experience as an ISSM, ISSE, or Technical Lead in cybersecurity-focused projects, with a demonstrated history of direct, frequent engagement with enterprise and high-value customers.

Required Skills:

• Expertise in identifying, analyzing, and remediating software vulnerabilities, including SAST, DAST, SCA, and penetration testing methodologies.
• Experience making risk-based recommendations and communicating complex technical findings to non-technical stakeholders.
• Hands-on experience in a cybersecurity leadership role within DevOps or DevSecOps environments.
• Demonstrated experience supporting DoD cybersecurity programs, including implementing and maintaining Authority to Operate (ATO) packages.
• Extensive experience with the Risk Management Framework (RMF) process, including all six RMF steps.
• Proficiency with eMASS (Enterprise Mission Assurance Support Service) for managing RMF packages and ATO documentation.
• Experience conducting system categorization, security control assessments, and working with security control baselines (e.g., NIST SP 800-53).
• Solid understanding of secure software development lifecycles (SDLC), DevSecOps, and CI/CD pipeline automation tools (e.g., Jenkins, GitLab, Azure DevOps).

Preferred Skills:

• Knowledge of recent Navy cybersecurity efforts related to continuous ATO and cybersecurity processes, e.g. Rapid Assess and Incorporate Software Engineering (RAISE) and Afloat Software Authorization Playbook (ASAP)
• Experience developing and delivering customer-focused security services or products in SaaS or cloud-first companies.
• Experience with threat modeling, red teaming, and incident response planning within Agile or DevOps frameworks.
• Hands-on familiarity with scripting (Python, Bash) or infrastructure-as-code (Terraform, Ansible) for automation of security tasks.

Competencies:

• Influential Communicator: Adept at translating technical security topics into meaningful business terms for diverse audiences.
• Customer-Centric Mindset: Passionate about delivering exceptional customer experiences and building trust with high-value clients.
• Strategic Thinker: Capable of envisioning and realizing secure business outcomes amid rapidly evolving technical and threat landscapes.
• Demonstrates strong self-direction and ownership, independently identifying security risks, driving solutions to completion, and holding themselves accountable for outcomes without requiring close supervision.

Pay Range* : $72,000 - $114,450 or $85,500 - $139,650

This amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate's experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience.

EEO Statement:

IDT is an Equal Opportunity employer.