Senior DevSecOps Security Control Analyst
USA MD Columbia (Field), United States
USD 125K-225K Senior-level Full Time
Tasks
- Analyze vulnerabilities in source code dependencies and IaC
- Assess secure container platforms and Kubernetes configurations
- Conduct threat modeling and secure design guidance
- Design and evaluate secure multi cloud architectures
- Document and communicate security findings and recommendations
- Drive vulnerability management lifecycle
- Identify investigate and escalate cybersecurity incidents
- Implement IAM and secrets management
- Implement manage security monitoring and endpoint protection
- Integrate artifact scanning integrity checks and policy as code
- Lead security control assessments
- Maintain authorization artifacts
- Map technical evidence to RMF NIST SP 800 53 controls
- Perform DAST validation
- Perform SAST validation
- Perform SCA validation
- Secure CI CD pipelines with automated controls
- Triage vulnerabilities and perform risk analysis
- Validate remediation effectiveness
Perks/Benefits
- N/A
Skills/Tech-stack
800-53 | AWS | Artifact scanning | Azure | CI/CD | Cloud Security | Cloud platform | Container Security | Control Assessment | DAST | DevSecOps | Google Cloud | Google Cloud Platform | IAM | IaC | Incident Response | Integrity checks | Kubernetes | NIST SP | NIST SP 800 | NIST SP 800-53 | Network policies | Pod security | Podman | Policy-as-Code | RBAC | RMF | SAST | SCA | SLSA | SP 800-53 | Secrets management | Security Control | Security Control Assessment | Shared responsibility | Shared responsibility model | Sigstore | Supply Chain | Supply chain security | Threat Intelligence | Threat modeling | Vulnerability Management | Vulnerability scanning | Zero Trust | “as-code”
Education
Related jobs
-
Manager, Cybersecurity Engineering USD 119K-160KAccess Controls | Change Management | Cloud Security | Cybersecurity | EDRMid-level Full TimeUSA-Texas-Houston3h ago
-
Advana | Azure DevOps | CI/CD | Data Modeling | Data NormalizationMid-level Full TimeArlington/Rosslyn, Virginia, United States3h ago
-
Security Engineer, Access Security Team USD 123K-174KAccess Control | Access Management | Attack Path | Attack path modeling | Automated remediationEntry-level Full TimeNew York, NY, USA4h ago
-
DevSecOps Engineer USD 98K-206KAWS | Backup | CI/CD | Compliance | Container OrchestrationFlexible time off | Learning resourcesMid-level Full Time376 SARASOTA FL, United States16h ago
-
Information Security Systems Analyst USD 84K-131KAccess Control | Authentication | Authorization | Documentation | HIPAA401k matching | Dental insurance | Employee assistance program | Health insurance | Life insuranceMid-level Full Time100% Remote, United States R16h ago
-
Asset Management Analyst - Cybersecurity USD 76K-97KAsset Inventory | Asset Inventory Management | Automation | CSRD | Data MiningMid-level Full TimeLas Vegas, NV, United States16h ago
-
Security Operations Center (SOC) Analyst II USD 69K-130KDevOps | Endpoint Management | Event Correlation | Firewall | Incident ResponseMid-level Full TimePewaukee, WI, US16h ago
-
Security Operations Center (SOC) Analyst II USD 69K-130KAnalytics rules | Endpoint Management | Event Correlation | Firewall Management | Incident ResponseCustomer facing managed services | Mentoring support | On-call rotationMid-level Full TimeSpringfield, MO, US16h ago
-
Security Operations Center (SOC) Analyst II USD 69K-130KAnalytics rules | Cybersecurity | Detection engineering | DevOps repositories | Endpoint ManagementCustomer facing managed services | On-call rotationMid-level Full TimeLittle Chute, WI, US16h ago
-
Validator/Vulnerability Management Lead (5165) USD 80K-134KAuthorization to Operate | Continuous Monitoring | Cyber directives | EMASS | Enterprise Mission AssuranceHealth insurance | Hybrid telework | Paid leave | RetirementSenior-level Full TimePatuxent River, MD18h ago
-
Associate Information Security Engineer USD 74K-120KAccess Control | Incident Response | Logical Access | Logical Access Control | Network SecurityContinuing education | Dental insurance | FSA | HSA | Hybrid workMid-level Full TimeRochester, MN, United States19h ago
-
Senior Information Analyst, GRC Cybersecurity Frameworks USD 121K-165KAI Risk | AI Risk Assessment | Audit Support | Control Assessment | Control effectivenessFlexible spending account | Health savings account | Life, accident, and disability insurance | Medical, dental, and vision insurance | Paid sick leaveSenior-level Full TimeIrvine, CA, United States20h ago
-
Senior AI Security & Automation Engineer USD 110K-120KAccess Management | Azure Logic | Azure Logic Apps | Azure OpenAI | Bash401k matching | Dental insurance | Flexible working arrangements | Health insurance | Paid time offSenior-level Full TimeNew York, NY, United States21h ago
-
AWS | Access Management | Adversarial Simulation | Application Security | AzureExecutive-level Full TimeUS-WA-Bellevue21h ago
-
AI Security Engineer USD 153K-239KAPI Security | Access Management | Application Security | CASB | CSPMSenior-level Full TimeBoca Raton, FL, United States21h ago
-
DevSecOps and Cloud Integration Engineer, Senior USD 170K-170K.NET | AWS CodePipeline | AWS Lambda | Agile | Amazon ECS401k match | Dental coverage | Employee assistance program | Flexible spending account | Health insuranceSenior-level Full TimeUT, US21h ago
-
800-53 | AD Connect | AWS IAM | AWS Identity | AWS Identity Center401k plan with company matching | Bereavement | Employee assistance program | Health, dental, and vision care | HolidaysSenior-level Full TimeRemote - Nationwide, United States R22h ago
-
Mid-level Full TimeBoulder, CO23h ago
-
Manager Application Security USD 133K-190KAPI Authentication | API Security | API authorization | Application Architecture | Application SecurityEducation reimbursement | Flexible work arrangements | Hybrid work arrangement | Maternity and paternity leave | Medical, dental, and vision coverageMid-level Full TimeUnited States1d ago
-
Cyber Security Engineer USD 117K-155KAccess Control | Access Management | Cause analysis | CyberArk | DLPHybrid workMid-level Full TimeAtlanta, Georgia, United States1d ago
-
Bash | Incident Response | JSON | MITRE ATT CK | PowershellFully remoteSenior-level Full TimeColumbia, SC, United States R1d ago
-
Awareness Training | Control Assessment | Excel | Governance | Incident ResponseSenior-level Full TimeColumbia, SC, United States1d ago
-
Senior Cybersecurity Compliance Analyst USD 115K-158K800-171 | 800-53 | Audit evidence | C-SCRM | CMMC401k | Dental insurance | Education assistance | Health insurance | HolidaysSenior-level Full TimeReston, VA, US1d ago
-
Director IT Security, Infrastructure, & Operations USD 150K-195KAccess Management | Asset Management | CIS | CapEx | Cloud ComputingExecutive-level Full TimeColumbus, Ohio, United States1d ago
-
Security Analyst USD 87K-124KContinuous Monitoring | EMASS | EMASSter | Incident Response | Management FrameworkMid-level Full TimeChina Lake, CA1d ago