DevSecops Engineer

Talan • New York, NY

2h • $90,000 - $105,000 • Hybrid

About The Position

We are seeking a talented DevSecOps Engineer to join our team and work on secure CI/CD, cloud, and application delivery platforms.
The ideal candidate will have strong expertise in CI/CD automation, cloud infrastructure, and security integration, and will be passionate about embedding security throughout the software development lifecycle (SDLC).

Requirements

• +2 years experience designing and maintaining enterprise-grade CI/CD pipelines using GitHub, GitHub Actions, and Jenkins (scripted and declarative pipelines).
• Hands-on experience integrating security and code quality tools into CI/CD workflows, including SonarQube and Fortify (SAST, vulnerability scanning, policy enforcement).
• Solid knowledge of Infrastructure as Code (IaC) and automation using Terraform or CloudFormation, as well as configuration management tools such as Ansible and Puppet.
• Proficiency in scripting and automation, including Bash, Python, and Groovy.
• Strong hands-on experience with AWS cloud services, including EC2, S3, IAM (roles and policies), VPC networking, CloudWatch, SSM, and ECS/EKS.
• Experience working in secure, regulated, or enterprise environments, with a strong understanding of DevSecOps best practices.
• Ability to collaborate effectively with cross-functional teams (development, QA, security, and operations).

Nice To Haves

• experience with Docker, OpenShift, Helm, and container orchestration platforms.

Responsibilities

• Design, implement, and maintain secure, enterprise-grade CI/CD pipelines for application build, test, and deployment.
• Integrate security scanning, code quality checks, and vulnerability management into CI/CD workflows (SAST, compliance, policy enforcement).
• Automate infrastructure provisioning, configuration, and application deployment using Infrastructure as Code (IaC) and configuration management tools.
• Collaborate closely with development, QA, security, and operations teams to ensure security is embedded across all stages of the SDLC.
• Support and enhance cloud, containerized, and orchestration environments, with a strong focus on security best practices.
• Contribute to pipeline reliability, performance optimization, and ongoing operational support.
• Ensure high-quality, secure automation through scripting, testing, documentation, and best DevSecOps practices.

Benefits

• 401(k) retirement plan with company matching
• 15 days of paid vacation per year at hire and up to 27 according to seniority (annual untaken vacation days are cashed out)
• 8 paid holidays + 5 sick days + 2 personal days per year
• Company health, dental, and vision insurance plans + FSA
• Voluntary STD and LTD
• Commuter/transit benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees