Cybersecurity Engineer - DSOP

Cybersecurity Engineer - DSOP

Job ID: 2614830

Location: Chantilly, VA, United States

Date Posted: Jul 23, 2026

Category: Software

Subcategory: DevSecOps

Schedule: Full-Time

Shift: Day Job

Travel: Yes - 10% of the time

Minimum Clearance Required: TS/SCI

Clearance Level Must Be Able to Obtain: None

Potential for Remote Work: On-Site

Benefits: Click here

Share: mail

Apply Now >

Apply Now >

Job Description

Description

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force, bringing deep expertise in how cutting edge technologies are engineered, secured, and delivered to the fight. At the center of this mission, the Common Mission Control Center (CMCC) unifies data, sensors, mission applications, cloud based services, and emerging AI enabled automation to give warfighters a decisive edge-turning complex, multidomain information into fast, clear, and actionable decisions in the moments that matter most. The CMCC System Facilitator contract positions SAIC to accelerate how new capabilities are integrated, tested, secured, and transitioned into operational use, working side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This effort offers the chance to directly shape how the Air Force sees, decides, and acts across all domains-making a tangible and immediate impact on warfighter effectiveness.

The Cybersecurity Engineer (DSOP) builds and operates CMCC's secure DSOP pipeline to enable rapid, safe development and onboarding of Capability Provider applications. This role integrates automated SAST/DAST/container security and SBOM/SCA scanning, enforces secure coding gates, validates cyber artifacts, and ensures all pipeline evidence is routed to Infrastructure TO for Operational Baseline updates. The DSOP Engineer provides direct developer support, jointly participates in early DSOP/cloud design, and lays the foundation for secure-by-default CI/CD automation.

Job Duties include:

• Build, enhance, and operate DSOP cyber pipeline stages (SAST, DAST, container scanning, SBOM/SCA).
• Implement pipeline blocking rules for Critical/High vulnerabilities.
• Integrate cyber validation tasks into CI/CD for multiple environments.
• Perform functional validation of CP/External artifacts when possible; deliver validated cyber outputs to Infrastructure TO.
• Produce RMF/cATO‑ready cyber evidence (scan results, mitigation records, SBOM/SCA, logs).
• Validate artifact integrity (image signing, checksum enforcement, provenance tracking).
• Provide direct developer enablement: onboarding into DSOP tools, secure coding guidance, WHY‑based mentorship.
• Review, categorize, and drive remediation of CWE/CVE findings across DSOPS, Cloud, CE, and CP teams.
• Validate rollback readiness when cyber gates block promotion.
• Partner with Cloud engineers on early pipeline/environment design and promote secure-by-default automation.

Qualifications

Qualifications:

• Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more experience
• US Citizenship
• Required Qualifications & Experience:
• Hands on experience running automated SAST/DAST/container scans using Fortify, ZAP, Grype/Trivy or similar tools.
• Experience documenting mitigations, reviewing CWE/CVE outputs, and validating secure coding practices.
• Proficiency with DevSecOps tooling (GitLab CI/CD, container registries, SBOM/SCA tools).
• Experience supporting secure coding compliance and vulnerability remediation.
• 8140 aligned certifications such as Security+, CISSP, CCSP, CASP+, or equivalent.

Desired qualifications and experience:

• Experience supporting RMF/cATO pipelines-producing cyber evidence, aligning pipeline scans with SSP/POA&M updates.
• Background integrating secure DevSecOps automation across multi classification environments.
• Experience enabling developers by creating training, guidance, and best practice workflows.

Desired Skills and Certifications:

• Deep experience with GitLab CI/CD, image signing, SBOM/SCA creation, and pipeline compliance validation.
• Familiarity with secure by design and shift left security principles embedded across DSOP automation.
• Strong communication habits-providing timely vector checks, developer friendly guidance, and clear evidence trails.

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Overview

SAIC accepts applications on an ongoing basis and there is no deadline.

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

Share: mail

Apply Now >