DevSecOps Senior Specialist

Primary Responsibilities

Typical Responsibilities/Tasks

• Design, implement, and manage secure CI/CD pipelines.• Embed security controls, scanning, and testing into development workflows.• Ensure infrastructure, applications, and container environments meet security and compliance standards.• Automate provisioning, configuration, monitoring, and scaling of infrastructure using Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible, CloudFormation).• Manage cloud and containerized environments (AWS, Azure, GCP, Docker, Kubernetes).• Develop and maintain automated security validation tools and monitoring systems.• Integrate tools for static and dynamic application security testing (SAST, DAST), software composition analysis (SCA), and vulnerability management.• Implement identity, access management, and secrets management solutions.• Ensure systems comply with cybersecurity standards, policies, and frameworks (e.g., NIST, ISO 27001, FedRAMP)• Knowledge of security tools (e.g., SonarQube, Aqua, Twistlock, Snyk, HashiCorp Vault).• Proficiency in scripting/programming languages (Python, Bash, PowerShell, Go).• Familiarity with monitoring tools (Prometheus, ELK/EFK stack, Splunk).

Required Qualifications

• DoD 8140 Certification

Desired Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field. • 3–5+ years of specialized experience integrating security into DevOps pipelines.About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cyber security, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is a VA CVE certified Service-Disabled Veteran Owned Small Business (SDVOSB) and SBA HUBZone Certified with offices in Washington DC and Northern Virginia. www.PingWind.com