Ramp;D DevSecOps Engineering Scientist

Establish and Enhance Secure CI/CD: Design, implement, and maintain secure continuous integration/deployment pipelines to meet project requirements. Develop and enhance automated build, test, and deployment processes. Integrate automated security scanning tools. Implement Security-as-Code and Policy-as-Code practices into CI/CD to ensure safe and secure code for production. Integrate security gates that block vulnerable code from progressing to production.Infrastructure and Cloud Security: Implement and maintain security for Infrastructure as Code. Configure and enforce network security policies. Manage secrets securely using enterprise secret management solutions. Harden cloud environments including IAM roles, security groups, and logging. Establish and improve basic IaC approaches across project codebases.Vulnerability Management and Compliance: Perform regular security scans and assess results across applications and dependencies. Identify, prioritize, track, and help remediate vulnerabilities. Establish vulnerability remediation workflows. Coordinate periodic security testing and assessments. Automate compliance checks for relevant standards. Implement automated compliance controls. Maintain audit trails and documentation for security controls. Support internal and external security audits.Security Enablement and Collaboration: Partner with development teams to promote secure coding practices and increase DevSecOps adoption across projects. Provide security guidance and training to engineers. Help squads integrate DevSecOps practices into their workflows. Contribute to security policies and standards.Incident Response: Participate in security incident response and investigation. Support systems administration duties as needed, including privileged user access to support systems at ARL and partner sites.Other related functions as assigned.