DEVSECOPS Systems Engineer

Description

DEVSECOPS Systems Engineer

The GBS Group has an exciting opportunity in cybersecurity for a senior DEVSECOPS Systems engineer. As a DEVSECOPS engineer with GBS, you will work both independently and with a team of programmers and engineers on complex projects related to Naval ship platforms. The position will work to troubleshoot hardware and software systems and test to ensure their proper functionality. You will perform static and dynamic testing and analysis of baseline configurations. You will perform remote troubleshooting to assist onsite and ships force personnel in repairing system issues. You will be a vital person in the execution of system upgrades and use your professional leadership skills in a team environment to accomplish these goals. The position will also contribute real value by developing, troubleshooting, and testing software both in lab and on actual Naval ships and facilities.

Responsibilities include but are not limited to:

Design, develop, and/or implement existing development-security-operations (DEVSECOPS) solutions for deploying NSWCPD software products to laboratory or shipboard environments

Utilize software build automation and dependency management tools including, but not limited to, Tekton, GitLab, and Jenkins.

Utilize static application security testing, dynamic application security testing, and vulnerability scanning tools including, but not limited to, SonarQube, Coverity, OWASP zap, and Jfrog Xray.

Develop cloud-based infrastructure including, but not limited to, amazon web services (AWS) and Microsoft azure.

Create, manage, and integrate platform-as-a-service (PAAS) infrastructure including, but not limited to, red hat OpenShift and rancher Kubernetes government.

Create and implement automation for software developed using cloud platforms and/or solutions, including but not limited to software pipelines, infrastructure as code, automated testing frameworks such as robot framework.

Design, develop, and/or implement microservices and software container architectures for NSWCPD software products.

Integrate DEVSECOPS solutions with HM&E control system technologies, including, but not limited to, Rockwell automation, siemens, and Woodward controllers.

Perform static and/or dynamic analysis on source code for developed and provided software baselines.

Develop, plan, schedule, and execute test plans and test procedures for computer programs and hardware.

Document Issues, faults, or deficiencies found during software and hardware testing, troubleshoot issues, identify root cause, and provide solutions to enable testing to continue.

Provide remote troubleshooting assistance to onsite representatives.

Collect and analyze intrusion artifacts (e.g., source code, malware, system configuration, and residual evidence) and use discovered data to enable mitigation of potential cyber defense incidents within assigned systems.

Coordinate and provide expert technical support to defense technicians of assigned systems to resolve cyber defense incidents.

Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.

Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on assigned systems.

Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.

Participate in incident response functions.

Perform cyber defense incident triage, to include determining scope, urgency, and potential impact; identifying specific incident events; and making recommendations that enable expeditious remediation.

Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on assigned systems.

Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable incident Response Teams (IRTs).

Receive and analyze network alerts from various sources within assigned systems and determine possible causes of such alerts.

Provide hardware and software administration, maintenance, and disaster recovery support.

Provide cybersecurity support services to facilitate ongoing authorization efforts.

Develop software and/or hardware installation plans with input from external supporting commands and technical authorities.

Develop, maintain, and configuration manage software and hardware installation procedures, instructions, notices, and Standard Operating Procedures (SOPs).

Develop Engineering Change Proposal (ECP) packages for cybersecurity systems.

Provide engineering services that include development and maintenance in support of hardware and software technical documentation and requirements.

Provide engineering services that include development and maintenance in support of technical data packages (TDPs).

Good understanding and experience utilizing Agile PM methodologies and Scrum Master duties including but not limited to planning & leading daily scrums and Sprint Planning, Review, and Retrospective meetings, burn-down chart creation/updates, backlog management and staff guidance. Qualifications/ Required Skills:

Master's Level (MS) Degree in Electrical, Computer, or Mechanical Engineering from an ABET (Accreditation Board for Engineering and Technology) accredited program. Minimum Experience:

Target Experience: Ten (10) years of professional experience within industry as a system, electrical, and/or electronics engineer Ten (10) years of professional experience troubleshooting hardware/software systems in environments such as NCS, ICS, or warehouse automation

Ten (10) years of professional experience reading and/or creating electrical schematics and/or network diagrams

Ten (10) years of professional experience troubleshooting network-based systems

Five (5) years of professional experience applying one or more of the following sets of MBSE standards: OMG, UAF, DoDAF

Physical/ Mental Requirements:

Ability to work under stress and meet deadlines

Basic computational skills Pay & Benefits:

Salary: $90,000 - $100,000 based on experience

Discretionary bonuses

401(k) with match

Paid Time Off

11 holidays

Benefits include:

Medical

Dental

Vision

Voluntary Life insurance

Voluntary Accident/ Critical Illness Insurance

Company Paid:

Basic life Insurance

Short Term Disability

Long Term Disability EEO Statement

The GBS Group is an equal-opportunity employer. Employment decisions will be based on legitimate, nondiscriminatory business reasons, including merit, qualification, experience, and abilities. Our employment policies will not be influenced or affected by an applicant's or employee's race, color, religion, sex/gender, sexual orientation, gender identity or expression, transgender status, national origin, age, disability, marital or familial status, pregnancy, military/veteran status, genetic information, or any other characteristic protected by law. This policy governs all aspects of the employment relationship, including but not limited to selection, job assignment, compensation, discipline, promotion, termination, and access to benefits and training. Any employee who feels that he or she is or has been the victim of illegal discrimination or violation of this policy should immediately notify the Chief Administrative Officer or Human Resources. Employees may file a legitimate or good faith discrimination complaint without being subject to reprisal.