DevSecOps / Software Development Engineer

Salary: $153,000 - 193,000 per year Requirements:

• Active TS/SCI clearance and willingness and ability to pass a CI polygraph; U.S. citizenship is required, and cleared employment is contingent on clearance verification. Some duties may also require U.S. person status under export-control laws.
• Ability and willingness to work 40 hours per week in a SCIF in Herndon, Virginia.
• At least 3 years of industry experience in software development or software engineering.
• At least 5 years of DevSecOps industry experience with a bachelors degree in Computer Science, Information Systems, or a related field, or a masters degree with at least 3 years of relevant experience.
• Professional software development experience, including designing, writing, testing, debugging, and maintaining software in Python, Go, Java, C#, or a similar language; experience building automation tools, APIs, or applications.
• Strong expertise deploying, optimizing, and troubleshooting cloud environments.
• Demonstrated experience building and operating cloud-native applications using tools such as Kubernetes and Docker.
• In-depth experience with infrastructure-as-code tools such as Terraform, Ansible, or equivalents.
• Experience creating and managing CI/CD pipelines using GitLab or similar tools, such as Jenkins or Azure DevOps.
• Strong software automation skills using Python, Bash, or equivalent languages; Python or comparable application-development experience is required.
• Experience applying security practices in DevSecOps pipelines using tools such as Trivy, Grype, GitLab SAST, or SonarQube.
• Familiarity with monitoring tools such as Prometheus, Grafana, or the ELK Stack.
• Strong knowledge of networking and load-balancing technologies.
• Experience with Git or other source-control tools and collaborative development workflows.
• Experience with automated deployment technologies such as CloudFormation, Ansible, Puppet, or Chef.
• Experience deploying and maintaining open-source and custom applications.
• Moderate Linux system-administration experience with Red Hat, Rocky Linux, AlmaLinux, or similar.
• Working knowledge of Linux and Windows operating systems, web services, and SQL databases.
• Experience working in an Agile environment.
• Strong problem-solving skills, attention to detail, and ability to thrive in a fast-paced environment.
• Desired: Security+ or comparable certification for privileged-user access; experience with distributed processing, REST APIs, microservices, IaaS/PaaS, web services, Docker STIGs, or CONMON cybersecurity remediation; RHCSA, LPIC 1/2, CKA, or Docker Certified Associate certification.

• Build and maintain command-line tools, APIs, dashboards, and other software that streamline cybersecurity and developer workflows and reduce manual effort.
• Design, develop, test, and maintain clean, production-quality code to automate cybersecurity processes.
• Convert manual cybersecurity, compliance, infrastructure, and developer processes into repeatable automated workflows.
• Automate security analysis, vulnerability correlation, compliance tracking, remediation, and security-exception processes.
• Create dashboards and reporting applications that combine information from multiple systems and provide actionable visibility into security, compliance, infrastructure, and software delivery.
• Participate in code reviews and troubleshoot complex application and automation failures by examining code, logs, APIs, infrastructure, and system behavior.
• Deploy and manage highly available applications, supporting system reliability and scalability.
• Implement and maintain HashiCorp Nomad and Kubernetes clusters for workload orchestration.
• Configure, manage, and tune DNS for enterprise systems.
• Develop and implement infrastructure-as-code solutions using Terraform, Ansible, or similar tools.
• Build and manage CI/CD pipelines with GitLab or equivalent tools to automate deployments and accelerate development and integration.
• Monitor systems, review logs, and troubleshoot proactively to identify and resolve issues across networks, pipelines, and infrastructure.
• Integrate security testing and monitoring into DevOps workflows using tools such as ACAS and Trivy, and incorporate static-analysis tools such as GitLab SAST, Fortify, or SonarQube into CI/CD pipelines.
• Analyze cybersecurity scan results with the cybersecurity team, identify false positives, and help assemble supporting evidence for false-positive exceptions and enterprise approval of containerized and non-containerized software packages.
• Build and maintain tools that automate cybersecurity analysis and correlation as compliance requirements change.
• Remediate cybersecurity issues on DevSecOps-managed virtual machines, including operating-system patching, STIG implementation, and software-package updates.
• Build, maintain, and monitor release-product configuration management.

• Ansible
• Azure
• Bash
• C#
• CI/CD
• Cloud
• DevSecOps
• DevOps
• Docker
• ELK
• Git
• GitLab
• Grafana
• IaaS
• Support
• Java
• Jenkins
• Kubernetes
• Linux
• PaaS
• Prometheus
• Puppet
• Python
• REST
• SQL
• Security
• Terraform
• Web
• Windows
• microservices
• Load Balancing

More:

We are Vantor, a spatial-intelligence company helping decision-makers and operators understand current conditions and prepare for what comes next. We bring together problem solvers and technical teams to support customer missions and deliver meaningful impact. This mid-level DevSecOps/software development engineering role is based in Herndon, Virginia, supporting the development, integration, and cybersecurity compliance of intelligence capabilities in development and production environments. The work focuses on software engineering, automation, and DevSecOps pipelines that deliver components across multiple networks into private-cloud infrastructure for a government customer. You will work alongside DevSecOps engineers, software developers, infrastructure technicians, and cybersecurity professionals, using open-source technologies to build and maintain the full stack of a high-performance computing system serving thousands of users. Our multidisciplinary team spans cloud systems administration, DevOps, cybersecurity, software development, and systems engineering, and operates self-managed cloud infrastructure supporting more than 10 petabytes of data. We apply mission-support and technology-development experience to challenging intelligence problems, with prototyping and frequent, iterative feedback central to how we work. We offer a mission-focused environment where you can shape your future, build new capabilities, and contribute to work with direct mission impact. Compensation is determined by experience, qualifications, skills, location, and market conditions.

last updated 41 week of 2026