{"id":2367282,"url":"https://alion.io/job/cedge-qa-engineer-devsecops-analyst-supporting","title":"QA Engineer / DevSecOps Analyst (Supporting)","company":{"id":3913457,"name":"CEdge","domain":"cedgecorp.com","url":"https://alion.io/company/cedge","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"QA","role_family":"QA","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Louis, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":134000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":243},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"Jenkins","optional":false},{"name":"SonarQube","optional":false},{"name":"Veracode","optional":false},{"name":"Azure","optional":true},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-06-24T00:00:00Z","employer_posted_date":"2026-06-24","last_verified_at":"2026-10-13T00:38:54Z","board_verified":true,"closed_at":null,"days_open":111,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":111},"description":"CEdge has an opportunity for a QA Engineer / DevSecOps Analyst (Supporting) , located in Saint Louis, MO (remote/on-site when required). If you are ready to work alongside World Renowned Technology experts, and carry the skills below, this is the opportunity that will inevitably take your career to unbelievable levels! Clearance Required: None; MoDOT MACHS background check required. POSITION SUMMARY The QA Engineer / DevSecOps Analyst owns the quality and security pipeline for all TMS maintenance and programming deliverables. The contract imposes hard security scan obligations - 90-day mandatory scans, 10-business-day High-Threat remediation, static scan score maintained at 90 or above - that require a dedicated owner. This individual schedules and executes scans, triages results, coordinates remediation with developers, and ensures every SOW deliverable passes quality gates before staging for MoDOT acceptance. This position is not submitted as an Exhibit E biography but is critical to meeting the contract's measurable security SLAs. KEY RESPONSIBILITIESSchedule, execute, and report all required 90-day security code scans for critical and external-facing TMS web applications; maintain static scan score ≥ 90 at all times (§2.3.7)\nTriage scan results: classify vulnerabilities by severity, assign ownership to developers, and track High-Threat remediation to closure within 10 business days (§2.3.7)\nOperate and maintain the CI/CD pipeline in Azure DevOps: configure build triggers, automated test execution, and gate controls that enforce quality and security standards before merge\nDevelop and maintain automated test suites (unit, integration, regression) for the highest-risk TMS modules; expand coverage during SOW development\nExecute SOW quality gates: confirm unit, integration, and system test completion; document results with pass/fail criteria; prepare staging packages for MoDOT acceptance\nParticipate in code review from a security and test-coverage perspective; flag testability or security concerns during architecture walkthroughs\nTrack and report security and quality metrics to the Technical Program Manager weekly; produce monthly scan compliance evidence for Program Manager review before invoicing\nEnsure mirrored workstation environment at CEdge matches MoDOT's security scanning toolchain; coordinate tool updates within 30 days of MoDOT infrastructure change notifications\nSupport ADA/Section 508 accessibility testing for all new and modified web-application deliverables REQUIRED QUALIFICATIONS\nMinimum 3 years of software QA, test engineering, or application security experience\nHands-on experience with static application security testing (SAST) tools (SonarQube, Veracode, Checkmarx, or equivalent)\nExperience with CI/CD pipeline configuration in Azure DevOps, Jenkins, or equivalent\nExperience writing and executing test plans, test cases, and regression suites for .NET web applications\nAbility to classify and triage CVSS-scored vulnerabilities and communicate remediation priorities to developers\nAbility to pass MoDOT background check PREFERRED QUALIFICATIONS\nMinimum 1 year of experience similar to MoDOT's technical architecture (.NET, Oracle, Azure DevOps)\nExperience with OWASP Top 10 and secure coding practices in a .NET context\nCompTIA Security+, GIAC GWEB, or equivalent security credential\nExperience with accessibility testing tools for Section 508 compliance (WAVE, axe, NVDA)\nMissouri residency or St. Louis metro area location\nExperience managing scan schedules against contractual cadence requirements WHAT’S IN IT FOR YOU? Full\nBenefits Package 10 Days PTO 10 Paid Holidays 401K WHO ARE WE? CEdge Inc is an innovative IT consulting firm, and a strategic business partner. We offer IT solutions to Federal and State government, as well as, Commercial Enterprises throughout the United States. Our main objective is to create an integrity-based culture that takes pride in working as a collaborative team that focuses on growth and is driven by the desire to provide purely ethical services for both our clients and teammates.","description_format":"text","description_chars":4091,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-12T16:53:05Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.377,"p_room":0.28,"age_days":111,"expected_fill_days":31,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-13T01:52:27Z"},"pay":null,"html_url":"https://alion.io/job/cedge-qa-engineer-devsecops-analyst-supporting","json_url":"https://alion.io/job/cedge-qa-engineer-devsecops-analyst-supporting.json","meta":{"generated_at":"2026-10-13T01:52:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3913457},"rest":"https://alion.io/mcp/rest/get_company?id=3913457"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcedge-qa-engineer-devsecops-analyst-supporting"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcedge-qa-engineer-devsecops-analyst-supporting"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcedge-qa-engineer-devsecops-analyst-supporting"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cedge-qa-engineer-devsecops-analyst-supporting\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcedge-qa-engineer-devsecops-analyst-supporting"}]}