Job Title: Platform Security Engineer (DevSecOps)
Location: McLean, VA
Employment Type: W2 Contract
About the Opportunity:
ZipStaff is hiring a Platform Security Engineer for our client, a leading government technology consulting firm. You will integrate and enhance security across software delivery pipelines for mission-critical federal defense systems, ensuring compliance with DoW cybersecurity mandates and driving continuous improvement across the CI/CD ecosystem.
What You'll Do:
- Evolve secure CI/CD pipelines by integrating and automating SAST, DAST, SCA and container scanning tools.
- Tune scanners, refine vulnerability thresholds, reduce false positives and optimize remediation workflows.
- Harden IaC templates (Terraform) and enforce policy-as-code across environments.
- Conduct risk assessments and contribute to SSPs and continuous ATO efforts.
- Collaborate with development, operations and security teams; monitor pipelines and support incident response.
- Champion zero trust principles across the SDLC.
Required Qualifications:
- 5+ years of cybersecurity engineering, including DevSecOps in federal or defense environments (IaC/CaC, CI/CD, SDLC).
- 3+ years of software engineering with Python, TypeScript or Bash and automation frameworks.
- 2+ years implementing cybersecurity solutions in AWS and container orchestration such as Kubernetes.
- Experience with AI software development tools such as Claude Code or Codex.
- Experience with Agile and Change Management methodologies.
- Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager/Viewer and SCAP tools, plus AI/ML security best practices.
- Ability to obtain a Secret clearance.
- HS diploma or GED.
Nice to Have:
- Zero Trust solutions for DevSecOps pipelines and security tool evaluation.
- GRC engineering: policy-as-code, automated compliance validation, continuous control monitoring, POA&M management.
- Active Secret clearance.
- Bachelor's degree in Cybersecurity, Computer Science or related field.
- Security+, AWS Solutions Architect, AWS Security or CISSP certification.
Benefits:
- Health Insurance.
- Dental Insurance.
- Vision Insurance.
- 401(k) + 401(k) matching.
- Paid time off.
- Referral Program.
About ZipStaff:
ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities.
To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.