DevSecOps Engineer
Core
Build and secure automated CI/CD pipelines for embedded Linux, Windows desktop, web, and firmware products, integrating security scanning and compliance hardening.
Role type
Mid-level DevSecOps Engineer
Builds
Automated build, test, scan, package, and release pipelines for spectrum intelligence software
Domain
Defense/Aerospace, Embedded Systems, Cybersecurity
Required skills
Linux administration and security, CI/CD pipeline management (GitLab CI, TeamCity), Python and Bash scripting, Docker containerization, vulnerability management, security scanning (SAST, DAST, SCA), infrastructure as code, code review
Preferred skills
Regulated environment experience (NIST, DISA STIGs, FIPS 140), security tooling (OWASP ZAP, Trivy, Semgrep, SonarQube), Terraform or Ansible, Windows build environments (PowerShell, .NET), embedded Linux packaging
Technologies
GitLab CI, TeamCity, Docker, Python, Bash, Linux (Ubuntu/Debian), AWS, Terraform, Ansible, NIST SP 800-53, DISA STIGs, FIPS 140, CycloneDX, SPDX
Responsibilities
Build and maintain automated CI/CD pipelines; Implement automated security testing (SAST, DAST, SCA, secret detection); Triage vulnerability findings and track remediation; Harden Linux product images and servers for compliance; Maintain secure build infrastructure and artifact signing; Review code and pipeline changes for security alignment; Write security documentation and runbooks
Seniority
Mid-level, hands-on IC
