DevSecOps Engineer (Vulnerability Remediation)

Piper Companies is seeking a DevSecOps Engineer (Vulnerability Remediation) to support a leading organization within the government technology and cloud services industry. The DevSecOps Engineer will play a critical role in securing modern cloud-native applications by driving both container security best practices and application-layer vulnerability remediation across AWS GovCloud environments.

Responsibilities:

• Lead vulnerability remediation efforts across containerized and cloud-native environments, with a focus on AWS GovCloud
• Implement and maintain security controls within Kubernetes (EKS) and Docker-based infrastructures
• Collaborate with development teams to identify, prioritize, and remediate application security vulnerabilities in React and NodeJS applications
• Design and enforce secure CI/CD pipelines using infrastructure as code tools such as Terraform
• Perform security scanning, risk analysis, and remediation validation across container images and application codebases
• Partner with cross-functional teams to integrate DevSecOps best practices into the software development lifecycle

Requirements:

• 4+ years of experience in DevSecOps, cloud security, or vulnerability remediation engineering
• Strong experience working within AWS GovCloud environments
• Hands-on expertise with Kubernetes (EKS), Docker, and container orchestration security
• Proficiency in JavaScript ecosystems, specifically React and NodeJS, with a focus on application security
• Experience with infrastructure as code, preferably Terraform
• Knowledge of vulnerability scanning tools and remediation frameworks within CI/CD pipelines
• Strong understanding of secure coding practices and application-level risk mitigation
• Ability to work remotely while supporting EST hours