Senior Security Engineer – DevSecOps

the Opportunity • Alpharetta, GA

2d • Remote

About The Position

We are CirrusLabs. Our vision is to become the world's most sought-after niche digital transformation company that helps customers realize value through innovation. Our mission is to co-create success with our customers, partners and community. Our goal is to enable employees to dream, grow and make things happen. We are committed to excellence. We are a dependable partner organization that delivers on commitments. We strive to maintain integrity with our employees and customers. Every action we take is driven by value. The core of who we are is through our well-knit teams and employees. You are the core of a values driven organization. You have an entrepreneurial spirit. You enjoy working as a part of well-knit teams. You value the team over the individual. You welcome diversity at work and within the greater community. You aren't afraid to take risks. You appreciate a growth path with your leadership team that journeys how you can grow inside and outside of the organization. You thrive upon continuing education programs that your company sponsors to strengthen your skills and for you to become a thought leader ahead of the industry curve. You are excited about creating change because your skills can help the greater good of every customer, industry and community. We are hiring a talented Senior Security Engineer – DevSecOps to join our team. If you're excited to be part of a winning team, CirrusLabs (http://www.cirruslabs.io) is a great place to grow your career. About the Opportunity We are a leading technology consultancy supporting a Fortune 50 enterprise IT organization in delivering security-focused engineering initiatives. As part of a critical enterprise-wide program, we are seeking a Senior Security Engineer to support DevSecOps enablement, source code security, and secret hygiene. This role is ideal for a hands-on cybersecurity professional with experience in DevSecOps, GitHub Enterprise, and secret management practices. You'll work closely with cross-functional teams to improve enterprise security posture using modern tooling, automation, and best practices. This is a remote role with limited travel, which may be requested but is not required. Role Summary As a Senior Security Engineer – DevSecOps, you will contribute to strengthening the security of source code repositories across the enterprise. Your initial focus will be on the detection and remediation of plaintext secrets exposed in GitHub repositories. You will help build scalable remediation workflows, support governance enforcement, and enable compliance with secure development standards. You will also work with tools like GitGuardian and ServiceNow, supporting continuous monitoring and automation efforts across DevSecOps pipelines.

Requirements

• 8+ years of experience in security engineering, DevSecOps, or application security within enterprise environments
• Strong hands-on experience with GitHub Enterprise, particularly in secret scanning and repository management
• Familiarity with identifying and remediating secrets embedded in code
• Experience using GitGuardian or similar secret detection tools
• Working knowledge of ServiceNow or equivalent platforms for issue tracking and triage
• Understanding of secure development governance and compliance frameworks
• Strong collaboration and communication skills to work effectively across technical and non-technical teams
• Comfortable using collaboration tools like Microsoft Teams and Outlook

Nice To Haves

• Experience in global consultancies, Big 4 firms, or enterprise IT organizations
• Familiarity with AI/GenAI use cases for security operations
• Exposure to secure SDLC and DevSecOps pipeline integrations
• Knowledge of GRC standards such as NIST, CIS Controls, or ISO 27001
• Experience working in distributed and cross-functional teams

Responsibilities

• Support the implementation of secure source code practices, focusing on remediating exposed secrets in GitHub repositories
• Identify and mitigate plaintext credentials, tokens, and secrets in enterprise codebases
• Apply governance policies related to secrets, PATs, SSH keys, and unauthorized repositories
• Assist in the integration and management of GitGuardian for automated secret scanning and alerting
• Participate in building remediation workflows and resolution tracking via ServiceNow
• Contribute to the development of repeatable, automated compliance processes for repository hygiene
• Generate dashboards and metrics to track remediation progress and security posture
• Support security awareness efforts and help document secure coding practices
• Explore AI/GenAI capabilities for improving detection and remediation efficiency (preferred)

Benefits

• continuing education programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed