DevSecOps Engineer

Role Overview

DevSecOps Engineer reporting into the Security Team Lead. You will secure cloud platforms, applications, and supporting infrastructure by continuously finding, prioritizing, and remediating security vulnerabilities. The work is hands-on and involves implementing security remediations and configuration changes.

Responsibilities

• Conduct continuous vulnerability assessments using tools such as SAST, DAST, SCA, container scanning, and IaC scanning.
• Partner with application, Operations, and Platform Architecture teams to remediate vulnerabilities and implement secure-by-default configurations.
• Establish and enforce secure coding guidelines and hardening standards.
• Support incident response (root-cause analysis and containment).
• Architect secure infrastructure with SRE/Platform teams, ensuring alignment with compliance frameworks such as SOC 2, ISO 27001, PCI-DSS.
• Maintain documentation for security controls, processes, and vulnerability management workflows.

Required Qualifications

• Bachelor’s degree in Computer Science/Cybersecurity/Engineering or equivalent experience.
• Hands-on experience with vulnerability scanning tools (e.g., Snyk, Tenable, Qualys, SonarQube, Trivy).
• Strong understanding of cloud security on AWS (also mentions Azure/GCP).
• Experience automating workflows with Python, Bash, or PowerShell.
• Practical knowledge of network security, encryption, secret management, and identity frameworks.

Desired Skills

• Relevant security certifications (e.g., AWS Security Specialty, GIAC, CEH, CSSLP, Security+).
• IaC security scanning using Terraform, CloudFormation, or Ansible.
• Experience managing Atlassian tools at the server level.
• Background in threat modeling and secure architecture patterns.
• Knowledge of SIEM/log analytics platforms (e.g., Splunk, Sentinel, ELK).

Clearance / Work Arrangement

• Requires Public Trust clearance.
• Remote position.