• Contribute to the evolution and reliability of our AWS/EKS infrastructure. • Support efforts around scalability, reliability, and platform industrialization. • Improve our monitoring, observability, and CI/CD pipelines. • Automate and industrialize infrastructure and deployment processes. • Guide development teams on platform and cloud topics and best practices. • Own initiatives independently, from design through production rollout.

• Diseñar, implementar y mantener la integración de herramientas SAST, SCA y DAST en los pipelines de CI/CD • Definir y estandarizar el SDLC de seguridad, incluyendo controles en etapas de diseño, desarrollo, pruebas y despliegue (security gates) • Configurar y mantener workflows en GitHub Actions para automatizar verificaciones de seguridad, calidad de código y cumplimiento

DevSecOps Engineer - Vulnerability Management Location: United States Job Description: Piper Companies is seeking a DevSecOps Engineer (Vulnerability Management) to join a leading government-focused technology organization. This DevSecOps Engineer (Vulnerability Management) role is ideal for a candidate with a strong DevSecOps mindset and hands-on expertise in AWS GovCloud, Kubernetes (EKS), and modern web applications built with React and NodeJS. The DevSecOps Engineer (Vulnerability Management) role is a long term open ended contract opportunity and allows you to work remote in EST time zone. Responsibilities of the DevSecOps Engineer (Vulnerability Management): - Analyze and triage vulnerability findings, prioritizing remediation based on risk, exploitability, and operational impact. - Partner with engineering teams to remediate vulnerabilities through patching, configuration updates, and secure coding practices across React and NodeJS applications. - Manage and improve container and Kubernetes (EKS) security, including image scanning, RBAC, and workload hardening. - Ensure remediation efforts align with compliance standards such as FedRAMP and NIST 800-53 within AWS GovCloud. - Develop automation to streamline vulnerability remediation and support incident response investigations when needed. Requirements of the DevSecOps Engineer (Vulnerability Management): - Hands-on experience in AWS GovCloud with a strong understanding of cloud security and compliance requirements. - Strong expertise in Kubernetes security (EKS), including RBAC, network policies, and container security best practices. - Experience remediating vulnerabilities in JavaScript-based applications, specifically React and NodeJS. - Familiarity with vulnerability management tools such as Tenable, Qualys, Aqua, or similar platforms. - Ability to communicate security findings clearly and translate them into actionable remediation tasks. Compensation for the DevSecOps Engineer (Vulnerability Management): - $120,000 - $140,000 - Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law. Keywords: Vulnerability management, remediation engineering, DevSecOps, AWS GovCloud, Kubernetes, EKS security, React, NodeJS, FedRAMP, NIST 800-53, container security, vulnerability scanning, CI/CD security, Terraform, CloudFormation, security automation, Tenable, Qualys, Aqua, incident response #LI-AG1 #REMOTE

• Implementar y optimizar controles de seguridad en pipelines CI/CD • Integrar herramientas SAST, SCA, Secret Detection y Container Scanning • Analizar y priorizar vulnerabilidades según riesgo e impacto • Acompañar a equipos de desarrollo en procesos de remediación • Aplicar hardening en contenedores, servidores y plataformas cloud • Construir dashboards y métricas de seguridad para la toma de decisiones • Participar en iniciativas de automatización y mejora continua • Crear documentación y buenas prácticas para equipos de ingeniería