Overview

Acuity is looking for a Senior Information Systems Security Engineer and Senior Technical Consultant for the Department of State DevOps team, Solution Architecture team and Application Vulnerability Assessment Program. Responsibilities include Developing pipelines. Must be able to configure, implement and administer Fortify Static Code Analyzer, WebInspect, OWASP and SonaType into the Azure DevOps pipeline and provide hands-on technical subject matter expertise for applications using the application scanning tools. Maintain Azure DevOps pool agent servers.

Responsibilities

• Monitor and coordinate security findings.
• Manage the program testing processes and testing activities of the security program.
• Manage the resolution of open issues and communicate essential information to stakeholders. 
• Administer applications and users and field troubleshooting questions for users and other stakeholders. 
• Analyze internal security and provide relevant information to internal and external stakeholders. 
• Analyze all platform level system changes and monitor impact and provide appropriate technical solutions to resolve issues efficiently; evaluate and document operating baseline according to required standards.
• Work with Project teams to review vulnerabilities and manage the resolution of vulnerabilities.
• Support the creation and maintenance of program documentation including Standard Operating Procedures, Test Plans, Reference Guides, Troubleshooting Guides, Training Guides, etc. 

Qualifications

• Good written and oral communication 
• Knowledge of Azure DevOps and Azure Cloud 
• Experience with both Static and Dynamic application scanning 
• Experience with Application and Cloud infrastructure security 
• Knowledge of application security scanning tools and procedures including Fortify Static Code Analyzer, Software Security Scanner, WebInspect, Sonatype and SonarQube. 
• Experience with Software Development Lifecycle 
• Experience with software stacks like .Net Core, Spring boot {Java}, Node.js, Rails 
• Experience using programming tools such as Visual Studio and Visual Studio Code, Github, Eclipse 
• Experience with PowerShell and Azure CLI 
• Experience with Automation 
• Knowledge of FEDRAMP and NIST protocols 
• Experience with Fortify, SonaType, OWASP, WebInspect, and other similar tools.
• Experience with multiple programming languages (C#, Java, JavaScript, Python, etc.).
• Experience with the full development cycle.
• Experience with CI/CD pipelines based on Azure DevOps.
• Configuration of Linux and Windows servers.
• Proficiency in various scripting languages, such as PowerShell.

Clearance Requirement:

• Active DOD Secret Clearance

About Acuity Inc:

Acuity is a leading management and technology consulting firm that specializes in serving the federal government. Our innovative, collaborative, and rewarding work environment has earned repeat honors from the Washington Business Journal’s “Best Places to Work”, Washington Post’s “Top Workplace”, and SmartCEO Corporate Culture awards. 

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.