R&D DevSecOps Engineering Scientist
Core
Integrate security practices directly into the software development lifecycle (SDLC) by building secure CI/CD pipelines, implementing security controls, and enabling DevSecOps adoption across project teams.
Role type
R&D DevSecOps Engineering Scientist
Builds
Secure continuous integration/deployment pipelines, automated security scanning tools, and Infrastructure as Code (IaC) security configurations.
Domain
Software Engineering / Cybersecurity / DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
CI/CD pipeline design and maintenance, Infrastructure as Code (IaC), cloud platform proficiency, Linux administration, container security, vulnerability management, security scanning methodologies, Identity and Access Management (IAM) principles, Security-as-Code, Policy-as-Code
Preferred skills
Kubernetes or ECS orchestration, HashiCorp Vault or AWS Secrets Manager, incident response, classified systems experience, SOC 2/PCI-DSS/HIPAA/ISO 27001 compliance frameworks
Technologies
GitHub Actions, GitLab CI, Jenkins, ArgoCD, AWS, Kubernetes, ECS, HashiCorp Vault, AWS Secrets Manager
Responsibilities
Design and maintain secure CI/CD pipelines with automated security gates; Configure and enforce network security policies and manage secrets; Perform regular security scans and coordinate vulnerability remediation; Partner with development teams to promote secure coding practices; Participate in security incident response and investigation.
Seniority
Mid-level (3+ years experience) to Senior (10+ years experience)
