Skip to content

Open nowPosted 5 hours ago

DevSecOps Engineer

Node.Digital

Where
Herndon, VA, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps EngineerNode.Digital · Herndon, VA, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Node.Digital's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 5 hours ago

The posting

DevSecOps Engineer

Location: Herndon, VA (Hybrid Work)

Preferred: US Citizenship

Experience: 3+yrs & 8 yrs

The DevSecOps Engineer is the architect and guardian of DevSecOps, Test Automation, and Security Automation. This role ensures the operational efficiency and continuous improvement of these solutions, embedding security and quality into every stage of the software delivery lifecycle. The engineer builds comprehensive CI/CD pipelines that carry code from source to production while ensuring compliance with applicable security, credentialing, and privacy policies, and integrates those pipelines with CMDB, reporting, and monitoring systems to support configuration management, asset management, governance, and performance and compliance tracking.

Key Responsibilities

DevSecOps Architecture and Pipeline Engineering

  • Design, build, and maintain end-to-end CI/CD pipelines that move code from source control to production in a reliable and repeatable way.
  • Build, package, and deploy applications on AWS (container, serverless, and VM-based workloads) through automated pipelines, with controlled promotion across dev, test, staging, and production, blue/green or canary releases, and automated rollback.
  • Define and maintain pipeline standards, templates, and infrastructure-as-code patterns for reuse across teams.
  • Continuously refine pipelines to improve speed, reliability, and efficiency.
  • Establish and maintain comprehensive automated testing within pipelines, including unit, integration, functional, regression, and performance tests.
  • Integrate automated security controls into pipelines, such as SAST, DAST, SCA, secrets detection, container and image scanning, and IaC scanning.
  • Ensure all pipelines and deployed solutions comply with applicable security, credentialing, and privacy policies.
  • Partner with security, privacy, and compliance stakeholders to translate policy requirements into automated controls.
  • Build dashboards and metrics (e.g., deployment frequency, lead time, change failure rate, mean time to remediate vulnerabilities) for leadership and governance bodies.
  • Coach development and operations teams on secure coding, pipeline use, and automation best practices.

Requirements

Required Qualifications

  • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
  • Experience operating high volume and large scale applications with cloud-native security in AWS
  • Hands on experience in DevOps, DevSecOps, or security engineering roles.
  • Hands-on experience building and managing CI/CD pipelines (Jenkins, Harness)
  • Experience with infrastructure as code and containerization/orchestration (Kubernetes, Docker)
  • Experience integrating security tooling into pipelines (Sonarqube, OWASP, Checkmarx etc)
  • Experience with CMDB and asset management tools (e.g., ServiceNow) and with monitoring and observability platforms (e.g., Splunk, Prometheus, Grafana).
  • Strong communication skills and the ability to work across technical and non-technical stakeholders.

Preferred Qualifications

  • Familiarity with security and privacy frameworks and regulations (e.g., NIST 800-53, FedRAMP, FISMA, Privacy Act).
  • Experience with policy-as-code (e.g., OPA) and software supply chain security (SBOMs, artifact signing).

Benefits

  • Medical
  • Dental
  • Vision
  • Basic Life
  • Health Saving Account
  • 401K Matching
  • Three weeks of PTO/Sick
  • 11 Paid Holidays
  • Pre-Approved Online Training
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Node.Digital's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Node.Digital's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Node.Digital's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.