DevSecOps Engineer – Junior at ASM Research
Fairfax, VA
—
Jul 7, 2026
Fairfax, VA
Jul 20, 2026
What this job asks for AI summary
A junior-level role focused on building and maintaining CI/CD pipelines with embedded security tooling — including static and dynamic analysis and dependency scanning — in a government enterprise environment. Day-to-day work spans infrastructure-as-code, automated testing, source control management, and troubleshooting deployments. Requires an active Secret clearance, U.S. citizenship, DoD 8140 compliance, and one to three years of relevant experience.
Junior level · 1+ years · National · Secret clearance
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $138,970 (middle half $107,524–$175,762).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The degree requirement accepts 'equivalent experience' in lieu of a formal degree, so no minimum degree is flagged as a hard gate.
The 1–3 years experience range is stated in the Required Qualifications section; 1 year is used as the minimum.
Jenkins is listed as an example alongside GitLab CI and GitHub Actions ('tools such as'); all three are treated as interchangeable options satisfying the same CI/CD pipeline requirement, with Jenkins as the primary name.
SAST and DAST are listed as examples of security scanning tools within the Required Qualifications section and are treated as separate hard-gate capabilities rather than a single combined skill.
Infrastructure as Code is listed in Required Qualifications with no specific tool named (Terraform, Ansible, etc.); it is captured as a general capability gate.
Docker and Kubernetes appear only under Preferred Qualifications ('familiarity with container platforms such as…').
Python and Bash appear only under Preferred Qualifications ('scripting languages such as…').
The role sits at the boundary between software development (building/shipping CI/CD pipelines and IaC) and systems operations (monitoring, incident response); 15-1252 is chosen because the primary day-to-day work is building and maintaining automated pipelines and IaC, with 15-1244 noted as the runner-up.
An active Secret clearance and DoD 8140 compliance are hard requirements; U.S. citizenship is also required.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.