Software Engineer, DevSecOps
Description of Task to be Performed:
AnaVation is seeking a Software Engineer-DevSecOps to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will develop and manage the CI/CD pipelines of mission applications across value streams. Considered a strong generalist on CI/CD and security requirements, the role automates security control implementation and evidence collection and advances inheritance and automation aligned with the Government’s Cyber Assessment Roadmap to sustain IATT, ATO, and cATO readiness.
Position Responsibilities: This position establishes the automation standard for secure software delivery, ensuring security is built into pipelines, and control evidence is generated continuously.
Responsibilities include:
- Build and maintain CI/CD pipelines (e.g., GitLab CI, Jenkins) for an enterprise consisting of many applications.
- Develop, test, and maintain containerized applications; work with source version control and build/release tooling.
- Develop Infrastructure as Code (IaC) and Configuration as Code (CaC) using Packer, Terraform, and Ansible.
- Automate security control implementation, validation, and evidence collection supporting RMF, ATO, and cATO.
- Integrate and tune pipeline security tooling: SAST, DAST, SCA, container scanning, secrets detection, and policy gates.
- Support security-relevant changes (SRCs), Security Impact Assessments (SIAs), and control validation for embedded value streams.
- Support application/container vulnerability management, whitelisting decisions, and CTF/pipeline compliance so changes do not invalidate the ATO.
- Collaborate with ISSEs, software developers, Value Stream engineers, COT, CPT, and Government stakeholders across sprint cadences.
- Architect logging, monitoring, and telemetry to support continuous monitoring.
- Maintain a strong security-first mindset and support Zero Trust and secure software supply chain practices.
- Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
- Develop automated security policies in CI/CD (e.g., GitLab Policies) to flag End-of-Life images, remediate pipeline vulnerabilities, prevent unauthorized deployments, and quarantine compromised artifacts.
Required Qualifications:
- Clearance: U.S. Citizen; TS/SCI.
- Education: Bachelor's degree in Computer Science, Cybersecurity, IT, Software Engineering, or related field.
- Certification: DoD 8140/8570 IAT Level II e.g., Security+ CE or equivalent.
- Location: Full-time on-site in San Antonio, TX.
- Experience and Knowledge:
- Senior level comprehensive knowledge across key tasks and high-impact assignments; plans and leads major technology assignments; functions as a technical expert across the team; may lead others.
- Deep understanding of Agile and DevSecOps methodologies; DevSecOps implementation using Jenkins, GitLab, or similar.
- Skillset to build and maintain CI/CD pipelines for a large enterprise (hundreds of applications).
- Experience developing IaC/CaC with Packer, Terraform, and Ansible; development experience with Kubernetes, Docker, and Helm.
- Experience with cloud systems and architectures (AWS, Google Cloud, or Azure); Linux and scripting (Bash, Python).
- Working knowledge of source version control, build/release tools, and CI/CD; strong security-first mindset.
- Minimum years of experience - 4 years of relevant experience
Preferred Qualifications:
- Clearance: Active TS/SCI.
- Education: Advanced degree in a related technical field.
- Certification: CKS, CKA, AWS certifications, CCSP, or GitLab certifications.
- Experience and Knowledge:
- Experience developing software with Java/Spring, Python, JavaScript/node.js, or Angular; microservice architectures (REST, JMS, AMQP).
- Experience with Istio; experience supporting Government software factory environments.
- Experience supporting Continuous Authority to Operate (cATO).
- Experience with secure software supply chain (SBOM, artifact signing).
- Experience supporting IL4, IL5, or IL6 cloud environments; COT, CPT, or Security Control Assessors.
- Experience with GitLab security policies, Twistlock, Anchore, Defect Dojo, container signing (e.g., cosign/sigstore), and End-of-Life image detection.
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
Skills
As published by lever · 21 questions · 9 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL, Other website
Pick from a list (12)
- Are you Legally Authorized to Work in the United States? In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire optional
- PLEASE READ CAREFULLY AND INITIAL EACH PARAGRAPH BEFORE SIGNING I have disclosed all information that is relevant and should be considered applicable to my candidacy for employment. optional
- I understand, where permissible under applicable state and local law, I may be subject to a pre-employment drug screen and background check after receiving a conditional offer of employment to investigate my criminal background [, driving record][, credit history] and other matters related to my suitability for employment. optional
- I hereby certify that the information given by me is true in all respects. I authorize AnaVation, LLC and its representatives to contact my prior employers and all others (with the exception of my current employer, only if I have marked “May we contact?” of this application as “No”) for the purpose of verification of the information I have supplied and release same from any liability resulting from the information released. I authorize employers, schools and other persons named on this application to provide any information or transcripts requested. optional
- I understand employment with AnaVation, LLC is also contingent on my providing sufficient documentation necessary to establish my identity and eligibility to work in the United States. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not conflict with, or result in the violation of, breach of, or default under, any contract, agreement or understanding that I am a party to or am bound by, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not violate any non-solicitation, non-competition or other similar covenant or agreement I have with any of my prior employers, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, I will report to my supervisor, a representative of HR or other member of management, if I am ever harassed or discriminated against by someone in the company or if I ever become aware of any unethical behavior by any employee. optional
- I expressly understand and agree that, if employed, my employment, having no specified term, is based upon mutual consent and may be terminated at will, with or without cause, by either party (AnaVation, LLC or me) without prior notice to the other, unless otherwise prohibited by law. Additionally, I understand that no representation, whether oral or written, by any representative or agent of AnaVation, LLC, at any time, can constitute an implied or express contract of employment. I further understand no representative or agent of AnaVation, LLC has the authority to enter into an agreement for employment for any specified period of time or to make any change in any policy, procedure, benefit or other terms or condition of employment other than in a document signed by the Chief Executive Officer or an authorized representative. optional
- I certify that all of the above information is true and complete, and I understand that any falsification or omission of information may disqualify you from further consideration for employment or, if hired, may result in termination regardless of the time elapsed before discovery. Note: An offer of employment is conditioned upon complying with AnaVation, LLC's requirements including, but not limited to, signing a consent to conduct a background investigation. MY SIGNATURE IS EVIDENCE THAT I HAVE READ AND AGREE WITH THE ABOVE STATEMENTS._ Applicant's signature (selecting yes below is equivalent to a handwritten signature) optional
- Do you hold a US Government Top Secret Clearance or Above?
- Are you able to work full-time on-site in San Antonio, TX and reside within commuting distance by your start date?
Written answers (9)
- Home address
- Have you ever been granted security clearance by a U.S. Federal Government Agency? If yes, please state the level of clearance and Granting Agency Name.
- What is your expected salary range?
- EDUCATION: Please provided School Name, Dates Attended, Major, Degree Earned for all schools attended.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Using a separate section for each position, describe in detail all work experience including periods of unemployment. Resumes may not be substituted in lieu of completing the following employment information. Please include Employer Name, Position Held, Dates of Employment.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- PROFESSIONAL REFERENCES: List three professional references (other than those listed as current/former supervisor) that we may contact: Please provide Name, Relationship, Phone Number and email.
