DevSecOps Engineer

Job Description

Security Engineer to support day‑to‑day operations within our DevSecOps team. This role focuses on executing security tasks, maintaining application and pipeline security, enabling developer teams, and driving efficiency through automation. The ideal candidate is detail‑oriented, operationally strong, and comfortable working across tooling, processes, and engineering teams.

Job Responsibilities

• Perform security operations across application security, infrastructure security, and CI/CD pipeline security.

 • Support developer onboarding security tools and processes; provide clear guidance and training.

 • Ensure complete and consistent scan coverage for assigned applications.

 • Identify and automate recurring security tasks to reduce manual effort.

 • Support compliance and risk management by tracking policy adherence and documenting exceptions.

 • Improved operational efficiency through automated scans, triage, or workflow improvements.

 • Effective vulnerability management through accurate tagging, tracking, and ownership workflows.

 • Increased developer security awareness through ongoing support and enablement.

 • 3+ years in security engineering, DevSecOps, or related field.

 • Bachelor’s degree in a related discipline or equivalent practical experience.

 • Experience with application security and CI/CD security tooling.

 • Firm understanding of secure coding and modern development practices.

 • Familiarity with SAST, SCA, Container, IaC, MAST, and DAST scanning.

 • Experience in operational tasks such as ServiceNow ticket handling, daily user story updates, and on‑call rotations.

• Experience automating security workflows in a DevSecOps environment.

 • Background in mobile application security.

 • Knowledge of compliance frameworks (HIPAA, PCI, NIST) and data protection regulations (GDPR, CCPA).

 • Strong communication skills for explaining security concepts to technical and non‑technical audiences.

 • Experience providing developer coaching or training.

 • Familiarity with AWS, Azure, or GCP, and containerization (Docker, Kubernetes).

 • Relevant security certifications (CISSP, CISM, CEH) are a plus.