Devsecops Engineer Jobs

About The Position

Requirements

• Bachelor’s degree in Computer Science or related field and/or at least 7+ years’ experience in information technology, information security administration or security operations.
• Experience with agile workflows, including Scrum and Kanban.
• Hands-on experience of containers (e.g., Docker) and container orchestration (e.g., Docker Swarm, Kubernetes).
• Understanding DevSecOps tooling, including Terraform, Ansible, and CI/CD Pipelines.
• Experience with operations and security across Amazon Web Services (AWS).
• Ability to obtain and maintain technical team and business support to influence a collaborative effort to reduce attack surface while performing rapid, continuous implementation.
• Proficient in designing, building, and deploying complex engineering solutions
• Expert Programming knowledge in Python.
• Excellence in communicating business risk and remediation requirements from assessments.

Nice To Haves

• Other Languages a bonus.
• Interested in Agentic software development, including developing agentic Skills to accelerate feature requests and improve the quality of solutions delivered.

Responsibilities

• Simplify automation that applies security inter-workings with CI/CD pipelines.
• Work to consistently learn and share advanced skills and practices that promote team excellence.
• Build relationships with developers, stakeholders and scrum master’s to incorporate security principles into engineering design and deployments.
• Supervise testing and validation in application security controls across projects.
• Oversee implementation of defensive practices and countermeasures across infrastructure and applications.
• Draft and uphold CI/CD security strategy and practices in tandem with other technical team leads.
• Serve as a point of contact for security-based escalations and remain tightly involved through resolution.
• Build services and tools to enable developers and engineers to easily use security components produced by Application Security team members.
• Support the ability to “shift left” and incorporate security early on and throughout the development lifecycle.
• Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.
• Leverage Vulnerability database sources to understand the weakness, probability and remediation options supplied by vendors as well as workarounds.
• Join forces and provision security principles in architecture, infrastructure and code.
• Regularly research and learn new tactics, techniques and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary through the CI/CD pipeline.
• Enrich DevOps architecture with security standards and best practices.
• Partner with teams to define key performance indicators (KPIs) and metrics across business units.

Benefits

• Competitive salary
• Bonuses
• Health benefits from day one
• Flexible work options
• 2-for-1 matching gifts for charitable contributions
• Opportunity to secure annual grants for organizations
• On-demand professional development resources
• Generous time-away