DevSecOps Engineer
Core
Embed automated security controls into CI/CD pipelines, build internal DevSecOps tooling, and drive cloud-native security architecture to enable secure-by-default developer experiences.
Role type
Senior IC DevSecOps Engineer
Builds
Internal security tooling, pipeline libraries, security plugins, and automation frameworks for enterprise engineering teams
Domain
Cloud-native security, CI/CD security, container security, regulated industry compliance
Deliverable
production ML models | product features | infrastructure
Required skills
CI/CD pipeline design, container security (Docker, Kubernetes), cloud platform expertise (AWS, Azure, GCP), scripting (Python, Bash), Linux administration, Git, SAST/DAST/SCA integration, vulnerability management, threat modeling, infrastructure-as-code
Preferred skills
Internal developer platform (IDP) construction, compliance framework implementation, professional security certifications (CISSP, CISM, CCSP, AWS/Azure Security), multi-language proficiency (Java, JavaScript, Perl)
Technologies
Jenkins, Docker, Kubernetes, OpenShift, Snyk, SonarQube, Nexus, AWS, Azure, Google Cloud, Python, Bash, Linux, Git
Responsibilities
Design risk-based security gates and integrate comprehensive security testing into build/test/release stages; Build and maintain scalable internal DevSecOps tooling and platform extensions; Monitor production environments for misconfigurations and intrusions; Implement security controls for cloud-native architectures and containerized workloads; Evaluate and consolidate security tools to reduce complexity; Translate regulatory requirements into automated engineering controls for compliance; Collaborate with developers on secure coding and advise on safe cloud configurations; Lead vulnerability management and participate in threat modeling and architecture reviews
Seniority
Senior, hands-on IC
