DevSecOps Engineer / Security Specialist

Overview TISTA Science and Technology is seeking a DevSecOps Engineer / Security Specialist to join our growing team. At TISTA, you’ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We’re proud to serve and hire Veterans, and we put people first in everything we do. TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account & Flexible Savings Account, Paid Life Insurance, Short-term & Long-term Disability, 401K Match, Tuition Reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more! Responsibilities Integrate SAST/DAST, dependency, container and secrets scanning into CI/CD (GitHub, GitLab, Jenkins, SonarQube). Harden infrastructure-as-code and configurations with Ansible on AWS, Azure and OpenShift. Run vulnerability scans (ACAS/Nessus), track remediation and meet CISA BOD 22-01 timelines. Produce and maintain ATO evidence: SSP sections, POA&Ms and control documentation. Security QA variant: validate controls before release, run WASA and Fortify scans, and sign off on security release criteria. Qualifications 6+ years of experience, including 3+ years in DevSecOps or cyber engineering on federal systems (Mid / Level II). Security tooling in CI/CD pipe