DevSecOps Engineer
Core
Embed security into the software development lifecycle and CI/CD pipelines, focusing on application security guardrails, developer-facing tooling, and cloud security posture management.
Role type
Senior DevSecOps Engineer
Builds
Secure-by-default patterns, reusable infrastructure-as-code modules, and golden pipeline templates
Domain
Cloud Security / DevSecOps
Required skills
CI/CD security integration (SAST, DAST, SCA, secrets management), threat modeling, AWS security (IAM, VPC, SCPs), Azure/GCP security, Infrastructure-as-Code (Terraform), Python scripting, CNAPP platform operation (Wiz), container security
Preferred skills
Kubernetes security, AI/ML application security, Bicep, GCP Deployment Manager
Responsibilities
Embed SAST, DAST, SCA, and policy gates into CI/CD pipelines; Partner with developers to threat-model services and translate findings into guardrails; Build and maintain secure-by-default patterns and IaC modules; Operate cloud-native application protection platform (Wiz) to triage and remediate findings; Establish cloud security guardrails on AWS and Azure; Harden IAM roles, policies, and network exposure; Drive down internet-facing exposure; Provide security evidence for SOC 2 and audits