DevSecOps Engineer – Junior

Summary

ASM Research is seeking a Junior DevSecOps Engineer to support the development and operation of secure DevSecOps pipelines. The role involves integrating security practices throughout the software development lifecycle and collaborating with various teams to enhance secure software delivery processes.

Responsibilities

• Assist in designing, building, and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions
• Integrate security scanning tools (e.g., SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle
• Support Infrastructure‑as‑Code practices and automated environment provisioning to enable consistent and repeatable development, test, and production environments
• Implement automated testing and quality gates in pipelines to enforce code security, reliability, and compliance standards
• Manage source code repositories, branching strategies, and artifact versioning to ensure traceability and controlled releases
• Monitor pipeline performance, troubleshoot build and deployment issues, and support deployment strategies such as blue‑green and canary releases
• Document DevSecOps processes, pipeline configurations, and operational procedures, and contribute to continuous improvement initiatives using metrics and feedback
• Collaborate with development, security, and operations teams to optimize secure software delivery practices and maintain alignment with enterprise standards

Skills

• Bachelor's degree (or equivalent experience) in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field
• Typically 1–3 years of experience in DevSecOps, CI/CD, or software engineering environments
• Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes
• Familiarity with Infrastructure‑as‑Code concepts and tools and basic scripting for automation
• Understanding of secure development practices and security scanning approaches within automated pipelines
• Must meet DoD 8140 requirements and hold an active Secret clearance
• U.S. citizenship required
• Familiarity with container platforms such as Docker and Kubernetes in support of modern deployment patterns
• Exposure to security frameworks and compliance standards relevant to enterprise or government environments
• Experience with scripting languages such as Python or Bash to automate pipeline and administrative tasks
• Experience supporting deployment strategies such as blue‑green, canary, or rolling deployments

Qualifications

Must Haves

• Bachelor's degree (or equivalent experience) in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field
• Typically 1–3 years of experience in DevSecOps, CI/CD, or software engineering environments
• Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes
• Familiarity with Infrastructure‑as‑Code concepts and tools and basic scripting for automation
• Understanding of secure development practices and security scanning approaches within automated pipelines
• Must meet DoD 8140 requirements and hold an active Secret clearance
• U.S. citizenship required

Nice to Haves

• Familiarity with container platforms such as Docker and Kubernetes in support of modern deployment patterns
• Exposure to security frameworks and compliance standards relevant to enterprise or government environments
• Experience with scripting languages such as Python or Bash to automate pipeline and administrative tasks
• Experience supporting deployment strategies such as blue‑green, canary, or rolling deployments