Senior DevSecOps / Application Security Engineer
Core
Integrate security controls into application-development workflows, CI/CD pipelines, and code repositories while advising developers on secure coding practices.
Role type
Senior IC DevSecOps / Application Security Engineer
Builds
Secure CI/CD pipelines, automated security guardrails, and software supply-chain protections
Domain
Cloud-native development environments, containers, and infrastructure as code
Required skills
DevSecOps, application security, security engineering, cloud-native development, containers, infrastructure as code, Python, PowerShell, Bash, Docker, Kubernetes, Terraform, ARM, AWS CloudFormation, software supply-chain security, dependency management, SBOM, policy as code, DevOps tools, SDLC operationalization
Preferred skills
AI-enabled application security, AI risk assessment, AI tooling for security monitoring, IAM controls, data-loss-prevention practices
Technologies
AI, ARM, AWS, Azure, Bash, BitBucket, CI/CD, Cloud, DevSecOps, DevOps, Docker, GitHub, GitLab, IAM, Jenkins, Kubernetes, PowerShell, Python, REST, Security, Terraform
Responsibilities
Integrate security controls into application-development workflows, CI/CD pipelines, and code repositories; Advise and support developers on secure coding and build practices; Advance automation and policy-as-code to apply security requirements consistently; Secure AI-enabled applications, assess risks from AI in development and application design, and help establish appropriate controls; Design and implement secure CI/CD pipelines with automated SAST, DAST, software composition analysis, secrets scanning, code-integrity checks, and infrastructure-as-code and container scanning; Protect code repositories through branch protections, access controls, commit signing, and version-control governance; Secure the software supply chain through dependency validation, SBOM generation, and validation of third-party and purchased software; Ensure data is encrypted at rest and securely handled across development environments; Partner with identity and data protection teams to strengthen IAM controls and data-loss-prevention practices in development workflows; Use AI to enhance security monitoring, prioritization, or automation, and contribute code or secure prompting and automation solutions
Seniority
Senior, hands-on IC