{"id":1015636,"url":"https://alion.io/job/exiger-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":673013,"name":"Exiger","domain":"exiger.com","url":"https://alion.io/company/exiger","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":42,"ghost_share":0,"stale_share":0.262,"repost_share":0,"time_to_fill_p50_days":88,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McLean, United States","Richmond, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":207000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Docker","optional":true},{"name":"Helm","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"Jira","optional":true},{"name":"Kyverno","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"ServiceNow","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-09-17T14:10:32Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-11-06T22:44:35Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":49},"description":"Who We Are:\nExiger is the AI partner for supply chain and procurement automation. Its centralized 1EXIGER.AI platform allows organizations to manage their entire operating network, from parts to suppliers, regulators, and customers, through an autonomous agentic workforce that learns, adapts, and augments with every decision. The AI-native platform, combined with the largest supply chain knowledge asset, empowers 550+ global customers, including 150 Fortune 500 and 80+ government and defense industrial organizations, to act first. Exiger is FedRAMP® authorized and a 2x Leader in Gartner® Magic Quadrant™ for Supplier Risk Management.\nSenior DevSecOps Engineer\nLocation: Richmond, VA preferred\nPosition Summary\nThe Senior DevSecOps Engineer is a hands-on technical leader responsible for embedding scalable security controls, automation, and secure engineering practices throughout the software development lifecycle.\nAs a member of the Security team, this role partners closely with Engineering, Cloud, Platform, IT, and Compliance teams to automate security processes, improve vulnerability and finding management, and provide timely security feedback without creating unnecessary delivery friction.\nA key focus of this role is security automation. The successful candidate will have experience building automated workflows that integrate security tools with engineering and operational systems, including automated ticket creation, routing, enrichment, escalation, remediation tracking, and reporting.\nThe ideal candidate combines strong DevSecOps and cloud security expertise with hands-on software development and automation experience and is comfortable operating in regulated, cloud-based environments.\nResponsibilities\nDesign, build, and maintain automated security workflows across the software development lifecycle and broader security environment.\n\nAutomate security processes such as vulnerability intake, ticket creation, assignment, enrichment, escalation, remediation tracking, exception handling, and reporting.\n\nIntegrate security platforms with ticketing, CI/CD, cloud, and engineering systems using APIs, webhooks, scripts, and workflow automation.\n\nEmbed automated application, dependency, secrets, infrastructure-as-code, container, and API security testing into CI/CD pipelines.\n\nDefine and implement risk-based release gates, remediation timelines, exception processes, and finding ownership.\n\nBuild reusable secure pipeline templates, hardened images, self-service security controls, and policy-as-code guardrails.\n\nStrengthen security across cloud infrastructure, containers, Kubernetes, identity, secrets management, networking, and deployment processes.\n\nTriage vulnerabilities and security findings based on severity, exploitability, exposure, asset criticality, and business impact.\n\nAutomate vulnerability-management workflows to ensure findings are routed to the appropriate owners and tracked through remediation.\n\nSecure source code, third-party dependencies, build systems, artifacts, container images, and software supply-chain processes.\n\nSupport application security reviews, threat modeling, security architecture reviews, monitoring, and incident-response activities.\n\nTranslate regulatory and compliance requirements into scalable technical controls and automated audit evidence.\n\nPartner directly with Engineering teams to remediate security issues and promote secure development practices.\n\nEvaluate and integrate emerging security capabilities and technologies.\n\nDevelop metrics and dashboards to measure security posture, remediation performance, and automation effectiveness.\n\nLead cross-functional security initiatives and mentor engineers on DevSecOps and secure engineering practices.\n\nRequired Qualifications\nEight or more years of experience in DevOps, platform engineering, cloud engineering, application security, product security, DevSecOps, or cybersecurity engineering.\n\nSignificant hands-on experience designing, implementing, and operating DevSecOps capabilities in production environments.\n\nDemonstrated experience building security automation, including integrations between security tools, ticketing platforms, CI/CD systems, and engineering workflows.\n\nStrong software development or scripting experience using Python and/or Java, with additional experience in technologies such as PowerShell, Bash, JavaScript, or TypeScript.\n\nAbility to develop maintainable, reusable, and tested automation rather than relying solely on one-time scripts.\n\nStrong knowledge of REST APIs, webhooks, and systems integrations.\n\nExperience automating ticket creation, assignment, escalation, remediation tracking, or similar security operational workflows.\n\nStrong knowledge of CI/CD security, application security testing, vulnerability management, and software supply-chain security.\n\nExperience securing cloud platforms, containerized workloads, Kubernetes, infrastructure as code, Linux, networking, identity, encryption, logging, and secrets management.\n\nKnowledge of SAST, DAST, software composition analysis, secrets scanning, container scanning, infrastructure-as-code scanning, and related DevSecOps controls.\n\nKnowledge of threat modeling, OWASP guidance, web and API security, authentication, authorization, and secrets management.\n\nExperience prioritizing vulnerabilities and security findings based on technical and business risk.\n\nStrong communication skills with the ability to explain security risks, remediation options, and engineering tradeoffs to technical and non-technical stakeholders.\n\nBachelor’s degree in computer science, cybersecurity, engineering, or a related discipline, or equivalent practical experience.\n\nPreferred Qualifications\nHands-on experience with one or more of the following security platforms:\nCrowdStrike\n\nMicrosoft Sentinel\n\nAikido Security\n\nCode42\n\nQualys\n\nExperience integrating security platforms with Jira, ServiceNow, or similar ticketing and workflow systems.\n\nExperience with security orchestration, automation, and response (SOAR) platforms or equivalent automated security workflows.\n\nExperience with cloud-native security technologies such as Kubernetes, Docker, Terraform, Helm, and cloud IAM.\n\nExperience with policy-as-code technologies such as OPA, Rego, Kyverno, or similar tools.\n\nFamiliarity with SBOMs, artifact signing, dependency security, provenance, and software supply-chain frameworks.\n\nExperience supporting regulated environments and frameworks such as FedRAMP, NIST, SOC 2, ISO 27001, or similar standards.\n\nExperience developing security metrics, dashboards, and automated compliance evidence.\n\nExiger is named a Leader in the Gartner® Magic Quadrant™ for Supplier Risk Management, twice selected as one of Fast Company's 'Brands That Matter,' and recipient of the Third Party Risk Association's Innovator Award, Exiger's technology has been recognized by leading analyst evaluations and 50+ awards. Learn more at Exiger.com and follow Exiger on LinkedIn.\nAt Exiger, our values define how we work and why we lead. We are mission-inspired, imagination-driven, trust-anchored, and compassion-focused-committed to building technology that makes the world safer, more transparent, and more resilient.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.\nExiger’s hybrid work policy is periodically reviewed and adjusted to align with evolving business needs.","description_format":"text","description_chars":7609,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","RegTech, AML & Compliance","Supply Chain AI","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-09-17T23:01:15Z"},{"event":"close","at":"2026-09-25T13:17:42Z"},{"event":"reopen","at":"2026-09-29T20:27:27Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.9,"age_days":49,"expected_fill_days":88,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/exiger-senior-devsecops-engineer","json_url":"https://alion.io/job/exiger-senior-devsecops-engineer.json","meta":{"generated_at":"2026-11-06T22:59:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1797,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673013},"rest":"https://alion.io/mcp/rest/get_company?id=673013"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexiger-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexiger-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexiger-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/exiger-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexiger-senior-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1015636}},{"tool":"search_jobs","arguments":{"company":"exiger.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1015636},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}