DevSecOps Engineer
Core
Embed application security controls into CI/CD pipelines, investigate and remediate security findings, and conduct threat modeling to ensure security and privacy by default across applications and APIs.
Role type
DevSecOps Engineer (Application Security)
Builds
Secure CI/CD pipelines, security tooling integrations, and automated security controls for application and API platforms.
Domain
Retail / Wholesale / Application Security
Required skills
Application security (SDLC), CI/CD pipeline security, code review, threat modeling, security tooling design, OWASP Top 10, SAMM, ASVS, FIRST principles, programming (Java, C++, Python, JavaScript), LLMs and agentic coding platforms (Github Co-pilot, Gemini, Claude Code), mentoring
Preferred skills
None stated
Technologies
CI/CD pipelines, OWASP Top 10, SAMM, ASVS, FIRST principles, Java, C++, Python, JavaScript, Github Co-pilot, Gemini, Claude Code
Responsibilities
Embed security controls into CI/CD pipelines, investigate and remediate security findings, conduct targeted code reviews, implement security controls and automations, perform threat modeling, participate in defining best practices for application security
Seniority
Mid-level to Senior, hands-on IC
