{"id":4188487,"url":"https://alion.io/job/saic-cybersecurity-engineer-dsop-2","title":"Cybersecurity Engineer - DSOP","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":89,"ghost_share":0,"stale_share":0.854,"repost_share":0.011,"time_to_fill_p50_days":24,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chantilly, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CWE","optional":false},{"name":"Fortify","optional":false},{"name":"Git","optional":false},{"name":"Gitea","optional":false},{"name":"GitLab CI","optional":false},{"name":"Grype","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SonarQube","optional":false},{"name":"Trivy","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-12T16:02:33Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T18:54:15Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. Working alongside operators, engineers, Capability Providers, and government stakeholders, SAIC helps accelerate the delivery of secure, interoperable capabilities that enhance mission effectiveness.\nSAIC is seeking a DevSecOps Security Engineer to design, implement, and operate security capabilities within software delivery pipelines supporting the development, integration, testing, and deployment of mission applications. This engineer will work with Cloud, DevSecOps, Software, Integration, Test, and Cyber teams to help Capability Providers identify vulnerabilities earlier, remediate findings, and deliver secure software more efficiently.\nThe successful candidate will build automated security checks, generate evidence supporting the Risk Management Framework (RMF), guide developers through secure software delivery processes, and develop the program’s Secure Coding Guide. This position will also help establish the foundation for a certified CI/CD pipeline, automated compliance, and future continuous authorization capabilities.\nJob Duties Include\nDesign, build, and maintain security capabilities within DevSecOps and CI/CD pipelines.\n\nIntegrate automated SAST, DAST, container scanning, Software Composition Analysis (SCA), and Software Bill of Materials (SBOM) generation.\n\nImplement security gates that identify vulnerabilities and prevent unacceptable software artifacts from progressing through the delivery pipeline.\n\nAutomate the collection, organization, and delivery of security evidence supporting RMF, ATO, Continuous Monitoring, and future continuous authorization objectives.\n\nDevelop, maintain, and continuously improve the program’s Secure Coding Guide, including required practices, prohibited practices, secure design patterns, and software security expectations.\n\nTranslate Secure Coding Guide requirements into pipeline controls, automated checks, developer workflows, and application onboarding criteria.\n\nSupport Capability Providers with application onboarding, security tool use, secure coding practices, and vulnerability remediation.\n\nReview and help resolve CWE, CVE, STIG, dependency, container, and application security findings.\n\nValidate software artifacts through integrity checks, image signing, provenance tracking, SBOM review, and other software supply chain security practices.\n\nDocument security controls, pipeline processes, evidence outputs, technical decisions, and developer guidance.\n\nAssist with ISSO functions including Continuous Monitoring (ConMon), vulnerability management, security control assessments, remediation tracking, and maintenance of cybersecurity evidence supporting RMF and ATO activities.\n\nIdentify opportunities to reduce manual security activities, improve developer feedback, and accelerate secure capability delivery.\n\nPartner with Cloud and DevSecOps engineers to implement secure-by-default pipelines, infrastructure, and platform services.\nSupport security implementation across classified, multi-classification, containerized, and cloud-based development environments.\n\nRequired Qualifications\nBachelor’s degree and nine (9) years or more related experience; OR Master’s degree and seven (7) years or more of related experience; OR PhD and four (4) years or more of related experience. Relevant experience may substitute for education.\n\nTS/SCI clearance and U.S. citizenship.\n\nDoD 8140-aligned cybersecurity certification, such as Security+, CASP+, CISSP, CCSP, or equivalent.\n\nFive (5) to ten (10) years of cybersecurity, application security, DevSecOps, software engineering, or related experience.\n\nHands-on experience with DevSecOps, CI/CD, application security, security automation, or secure software delivery.\n\nExperience with security tools such as Fortify, OWASP ZAP, Grype, Trivy, SonarQube, or comparable products.\n\nExperience analyzing and supporting remediation of CWE, CVE, STIG, dependency, container, or application security findings.\n\nExperience with Git-based workflows, CI/CD platforms, and automated pipeline controls.\n\nExperience scripting with PowerShell, Python, Bash, or a similar language.\n\nDesired Qualifications and Experience\nExperience with GitLab CI/CD, Gitea, container registries, artifact repositories, or pipeline runners.\n\nExperience automating RMF, ATO, Continuous Monitoring, or compliance evidence.\n\nExperience developing secure coding standards, secure software development guidance, or application security requirements.\n\nExperience with SBOMs, SCA, image signing, artifact provenance, and software supply chain security.\n\nFamiliarity with Kubernetes, RKE2, containers, and cloud-native security.\n\nExperience supporting classified cloud, multi-classification, MLS/MILS, or Cross Domain Solution environments.\n\nFamiliarity with Zero Trust, policy as code, continuous authorization, or certified CI/CD pipeline concepts.\n\nExperience supporting DoD, Intelligence Community, command and control, or other mission systems.","description_format":"text","description_chars":5063,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-12T18:54:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":24,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-12T19:42:49Z"},"pay":null,"html_url":"https://alion.io/job/saic-cybersecurity-engineer-dsop-2","json_url":"https://alion.io/job/saic-cybersecurity-engineer-dsop-2.json","meta":{"generated_at":"2026-11-12T19:42:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":41574,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-cybersecurity-engineer-dsop-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-cybersecurity-engineer-dsop-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-cybersecurity-engineer-dsop-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-cybersecurity-engineer-dsop-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-cybersecurity-engineer-dsop-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4188487}},{"tool":"search_jobs","arguments":{"company":"saic.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4188487},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}