Senior DevSecOps Engineer

World Wide Technology Healthcare Solutions•Jenks, OK

About The Position

At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits and by delivering cutting-edge technology solutions for our clients. Founded in 1990, WWT is a global technology solutions provider leading the AI and Digital Revolution. WWT combines the power of strategy, execution and partnership to accelerate digital transformational outcomes for organizations around the globe. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps clients and partners conceptualize, test and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution and integration capabilities. With over 12,000 employees across WWT and Softchoice and more than 60 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 14 years in a row by Fortune and Great Place to Work® for its unique blend of determination, innovation and creating a great place to work for all. Solutions Consulting & Engineering is an organization that is Customer Focused and Solutions Led. We deliver end-to-end and emerging solutions to drive customer satisfaction, increase profitability and growth. Our success is enabled by our world-class management consulting, delivery excellence and engineering brilliance. Our goal is to bring together business acumen with full-stack technical know-how to develop innovative solutions for our clients' most complex challenges. WWT Digital is building a joint AI + Security practice and needs a Senior DevSecOps Engineer to anchor delivery of our CI/CD Security Baseline offering (DIG-APS-01). You will work alongside WWT's Global Security team and our AI-native delivery squads to embed automated security tooling into client SDLC environments — from initial assessment through hardened pipeline design and handoff. This is a client-facing, hands-on engineering role.

Requirements

4–7 years hands-on with CI/CD platforms — specifically security integration, not just DevOps
Deep familiarity with SAST/DAST/SCA tooling and the tradeoffs between them in different pipeline contexts
IaC security scanning (Terraform, Bicep, CloudFormation via Checkov, tfsec, or equivalents)
Secrets management: HashiCorp Vault, AWS Secrets Manager, GitHub Advanced Security secret scanning
Container and image scanning: Trivy, Grype, Clair, or equivalents
Can write pipeline-as-code — not just configure existing pipelines
Experience translating security findings for developer audiences, not just security teams

Nice To Haves

AI-generated code scanning, SBOM tooling (Syft, CycloneDX), software supply chain security (SLSA)
prior consulting or professional services background — client management and scoping matter

Responsibilities

Assess and instrument client CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps) with SAST, DAST, SCA, and secrets scanning tools
Implement SBOM generation workflows and license compliance gates
Configure and tune tooling (Snyk, Semgrep, Checkov, Trivy, SonarQube, OWASP ZAP, Veracode, or equivalents) to reduce false positive rates and drive developer adoption
Define security gates, policy-as-code frameworks, and break/fix thresholds appropriate to client risk tolerance
Translate findings into remediation roadmaps that engineering teams can act on without security expertise
Work with WWT Security architects on shared delivery engagements and co-present findings to client CISOs and engineering leadership