DevSecOps Engineer

Gogo Business Aviation • Broomfield, CO

5d

About The Position

At Gogo, security, reliability, and compliance are foundational to delivering exceptional connectivity experiences for business aviation customers around the world. As our technology platforms evolve, we rely on secure, scalable infrastructure and automation practices to protect critical systems and support continued growth. As our DevSecOps Engineer, you'll help design, implement, and maintain the security controls, compliance processes, and automation capabilities that protect our SaaS applications and cloud environments. If you're someone who enjoys solving complex security challenges, automating repetitive work, and collaborating across technical and non-technical teams, we'd love to meet you.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience
• 3+ years of experience in DevOps, Security Engineering, DevSecOps, or a related field
• Demonstrated experience implementing and managing infrastructure and application security controls
• Experience with vulnerability management, penetration testing tools, and security scanning technologies
• Strong knowledge of Microsoft Azure, AWS, GitHub, and Azure DevOps environments
• Experience supporting CI/CD pipelines and secure software delivery practices
• Ability to automate operational and security processes using appropriate tools and scripting techniques

Nice To Haves

• Experience supporting ISO, SOC, SOX, or similar regulatory and compliance frameworks
• Exposure to infrastructure-as-code and configuration management tools
• Knowledge of cloud security architectures and enterprise security operations
• Experience within SaaS, telecommunications, aviation, or other highly regulated industries
• Relevant certifications such as Security+, CISSP, CCSP, Azure Security Engineer, AWS Security Specialty, or similar credentials
• Familiarity with Windows Server environments, IIS, and database administration
• Experience with disaster recovery planning, validation, and resiliency testing
• Familiarity with network security concepts, technologies, and best practices
• Strong analytical, troubleshooting, and problem-solving skills
• Excellent written and verbal communication skills, including the ability to explain technical concepts to non-technical audiences

Responsibilities

• Design, deploy, and maintain security tools, controls, and best practices across our SaaS infrastructure and cloud environments
• Coordinate security patching efforts and ensure systems remain current against emerging threats
• Monitor and remediate vulnerabilities, CVEs, and security risks across applications and infrastructure
• Partner with Software Engineering, Infrastructure, and IT teams to strengthen security, compliance, and operational resilience
• Implement and automate security testing, infrastructure scanning, reporting, and compliance validation processes
• Manage and optimize certificate issuance, renewal, and lifecycle automation
• Support disaster recovery planning, testing, and validation to ensure business continuity
• Oversee external attack surfaces and proactively identify exposed applications and services
• Design and implement automation solutions that eliminate manual processes and improve operational efficiency
• Assist in administering and enhancing CI/CD pipelines to support secure, reliable software delivery

Benefits

• medical, dental and vision coverage with plans that can fit each employee’s needs
• immediate vesting 401k plan
• paid time off
• volunteer time off
• Employee Stock Purchase Plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level