Staff DevSecOps Engineer (R5824)

Shield AI•San Diego, CA

38d

About The Position

Cloud Engineering builds and operates the infrastructure and environments that support Shield AI’s software products and platforms. As a DevSecOps Engineer, you will design, build, and automate security controls across cloud infrastructure, software delivery systems, and containerized workloads. You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to turn security and compliance requirements into practical engineering controls. This is a hands-on engineering role focused on making secure configurations repeatable and maintainable. You will work across infrastructure, containers, CI/CD systems, and platform services to reduce security risk without creating unnecessary friction for engineering teams. At the Staff level, Define reusable patterns and drive adoption of security engineering practices across multiple teams.

Requirements

5+ years of related experience for Senior Engineer or 7+ years for Staff Engineer, or equivalent education and experience.
Experience implementing security controls in AWS or another major cloud environment
Experience with infrastructure-as-code and automated infrastructure provisioning
Experience securing containerized workloads and building or maintaining hardened container images
Experience integrating security tooling into CI/CD or software delivery systems
Experience with vulnerability management, dependency scanning, container scanning, or configuration validation
Experience implementing identity, secrets, and access controls in cloud or engineering environments
Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language
Ability to diagnose security and configuration issues across infrastructure, containers, and platform services
Experience working with security and engineering teams to implement shared technical controls

Nice To Haves

Experience operating systems in regulated or compliance-driven environments
Experience with Kubernetes security, workload identity, or container runtime controls
Experience building reusable hardened images or secure infrastructure baselines used across multiple teams
Experience with cloud security posture management, policy-as-code, or automated compliance tooling
Experience supporting audit evidence collection or continuous compliance workflows
Familiarity with software supply-chain security, artifact integrity, or signing/attestation workflows

Responsibilities

Design and implement security controls across AWS infrastructure and platform services
Build and maintain hardened container images and secure base images for engineering and production workloads
Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems
Automate security and compliance checks to reduce manual review and improve consistency
Implement secrets management, identity, and access controls across infrastructure and engineering systems
Build mechanisms for audit evidence, configuration validation, and compliance reporting
Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams
Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls
Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability or developer workflows
Define reusable patterns and drive adoption of security engineering practices across multiple teams