"Job#: 2035775 Job Description: As a DevSecOps Engineer, you will work hands on as a member of the Software Assurance Team (SwA) to ensure the secure development of software. You will work with the team to review results from various tools (SonarQube, SonaType, Fortify, etc.) as well as work closely with the development team to remediate vulnerabilities found in the source code, justify false positives, and create containerized versions of our applications.

Responsibilities: Manage security measures for containerized services using Docker, Kubernetes, and similar technologies. Develop and maintain documentation related to DevSecOps processes and tools. Monitor security tools in the development pipeline and adjust as necessary to improve automation and effectiveness. Collaborate with developers to enforce standards and to identify and mitigate security risks. Integrate security tools into CI/CD pipelines to ensure secure deployment practices and minimize vulnerabilities. Secure system configurations and install security tools, scan systems in order to determine compliancy and report results and evaluates products and various aspects of system administration. Conduct security program audits and develop solutions to mitigate risks. Evaluate, develop, and enhance security assessment capabilities. Perform vulnerability assessments including development of risk mitigation strategies.

Requirements: Associate degree with one-year relevant experience or three years relevant experience Experience with tools like Azure DevOps, SonarQube, SonaType, Fortify and AWS GovCloud. Proficient with Docker, Docker Compose, and orchestration tools i.e. Kubernetes, Docker Swarm. Knowledge of scripting languages such as PowerShell. Three years experience in C# and .NET programming languages. Secret security clearance. IAT level II baseline certification. Computing Environment (CE) certification.

Desired Skills: Experience with using eMASS for managing RMF records. Experience with PowerShell or other scripting languages. Experience with Amazon Web Services (AWS) architectures and security. Top Secret security clearance with SCI eligibility. Experience with Tenable Security Center (SC) and NESSUS; scanning and data analysis. Experience with Trellix ePO server and end products; deployment, configuration, troubleshooting and data analysis. Experience with STIGing tools; SCAP Compliance Checker, STIG Viewer, and Vulnerator. Experience with STIGing multiple technologies (i.e. Windows, AD, VMware, RHEL, CISCO, DNS, Palo Alto).

EEO EmployerApex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kin dom and Mexico.VEVRAA Federal ContractorWe request Priority Protected Veteran & Disabled Referrals for all of our locations within the state.We are an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. The EEO is the Law poster is available here. https://www.eeoc.gov/eeo-policy-statement