Easy Dynamics Corporation

Role Description A DevSecOps Engineer integrates security practices throughout the software development lifecycle within a Scrum framework. This role requires expertise in security automation, compliance monitoring, and Continuous Integration/Continuous Deployment (CI/CD) pipelines to ensure applications meet security standards while maintaining rapid development cycles. The position involves close collaboration with development teams, security officers, and stakeholders to deliver secure, compliant applications through iterative development processes. What you'll do - Security Integration: Implement and maintain security controls throughout the development pipeline, ensuring security is embedded in every phase of the software development lifecycle. - Compliance Management: Collaborate with Information System Security Officers (ISSOs) to review Security Technical Implementation Guides (STIGs) and support Authority to Operate (ATO) processes, ensuring compliance with security standards and regulatory requirements. - CI/CD Pipeline Security: Design, implement, and maintain secure CI/CD pipelines with automated security testing, vulnerability scanning, and compliance checks integrated into deployment workflows. - Scrum Process Participation: Actively participate in Scrum ceremonies, including sprint planning, daily standups, sprint reviews, and retrospectives, while providing security guidance and effort estimates for security-related tasks. - Vulnerability Management: Conduct regular security assessments, vulnerability scans, and penetration testing, while coordinating remediation efforts with development teams. - Infrastructure as Code (IaC): Develop and maintain secure infrastructure configurations using Infrastructure as Code principles with automated security policy enforcement. - Security Monitoring: Implement and manage security monitoring tools, logging systems, and incident response procedures to detect and respond to security threats in real time. - Risk Assessment: Perform security risk assessments, threat modeling, and security architecture reviews to identify and mitigate potential vulnerabilities. - Documentation and Training: Create security documentation, procedures, and training materials while maintaining compliance artifacts for audit purposes. Qualifications - Required: 4 years of experience + Bachelor’s degree, or 8 years of experience - Preferred: DoD Secret clearance or equivalent - IAT Level II certification required (e.g., Security+ CE, CCNA-Security, GSEC, GICSP, SSCP, CySA+, or other DoD 8570.01-M / DoD 8140 approved certifications at IAT Level II) - AWS - Experience specifically with AWS CDK and processes (preferred) - DevSecOps Expertise — Strong experience in DevSecOps practices, security automation, and secure software development within enterprise environments. - Scrum Methodology — Deep understanding of Scrum principles and Agile development practices, including integrating security requirements into sprint planning and user story development. - Security Standards Knowledge — Extensive knowledge of STIGs, NIST frameworks, ATO processes, and federal security compliance requirements, with experience working alongside ISSOs and security teams. Hands-on experience with ATO and STIG maintenance and renewal is preferred. - CI/CD and Automation — Proficiency with CI/CD tools, with GitLab CI preferred, as well as containerization technologies including Docker and Kubernetes, and automation platforms such as Terraform, Ansible, and CloudFormation. - Cloud Security — Experience with cloud security platforms and cloud-native security tools, with AWS Security Hub preferred. Familiarity with multi-cloud security strategies and additional platforms (Azure Security Center, Google Cloud Security) is a plus. - Programming and Scripting — Proficiency in scripting languages, JavaScript (preferred), Bash, and PowerShell, with experience using security testing frameworks and static/dynamic analysis tools. - Security Tools — Experience with vulnerability scanners (Nessus, OpenVAS), SAST/DAST tools, container security scanning solutions, and security orchestration platforms. - Communication and Collaboration — Excellent communication skills with the ability to work effectively across cross-functional Scrum teams, security officers, compliance teams, and stakeholders in fast-paced development environments. Benefits - Salary range for this role is $115,000-125,000 plus annual bonus Company Description Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal, state, or local laws.

Role Description The Scrum Master supports DoD Agile delivery teams by facilitating Scrum practices, removing impediments, and helping the team stay focused on delivering high-quality work in each sprint. This role serves as a practical guide for the team, working closely with product owners, developers, testers, and stakeholders to promote collaboration, transparency, and continuous improvement without acting as a senior program lead or direct manager. - Facilitate Scrum ceremonies, including daily stand-ups, sprint planning, sprint reviews, and retrospectives. - Help the team identify, document, and remove blockers that may affect sprint progress or delivery timelines. - Coordinate with the product owner to support backlog refinement, user story clarification, and sprint readiness. - Track sprint progress, team commitments, and delivery metrics using Agile project management tools. - Encourage effective communication among team members, stakeholders, and cross-functional partners. - Support continuous improvement by helping the team apply lessons learned and strengthen Agile practices over time. - Lead and participate in industry-standard Agile ceremonies such as sprint planning, daily stand-ups, sprint reviews, and retrospectives. - Collaborate with product owners and stakeholders to define and prioritize product backlogs. - Assist in the estimation and breakdown of user stories into actionable tasks. - Contribute to the development of Minimum Viable Products and incremental feature releases. - Coordinate with development teams to ensure timely delivery of product increments. - Monitor and track project progress using Agile project management tools. - Identify and address project risks and impediments that may impact product development timelines. - Continuously improve Agile processes and practices based on retrospectives and lessons learned. Qualifications - BA/BS with any Agile certification - DoD Top Secret Requirements - Salary range for this position is $70,000-85,000 Company Description Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal state or local laws.