DevSecOps Engineer

Role Overview

We are seeking an experienced DevSecOps Engineer to own and drive end-to-end security operations. This is a hands-on role, not coordination-only, where you will build tools that make application security easy for developers while utilizing agentic software development practices.

Must-Have Technical & Functional Skills

• End-to-End Ownership: Design, implement, operate, and continuously improve DevSecOps solutions. Provide technical leadership to set engineering standards and direct contractor delivery while remaining hands-on with implementation.
• Tooling & Automation: Build services and tools that simplify security for developers; automate integrations across CI/CD pipelines, cloud services, infrastructure, and applications.
• Agentic Practices: Use agentic software development practices to accelerate feature delivery and improve solution quality. Evolve capabilities for automated threat modeling, material-change detection, context-aware assessments, and model-based security testing.
• Collaboration & Communication: Partner with developers, product managers, infrastructure engineers, Cloud Security, and InfoSec teams. Clearly communicate technical findings, business risk, and remediation requirements to both technical and non-technical stakeholders.
• Innovation: Research emerging engineering practices and apply relevant improvements to platforms and delivery processes. Define KPIs for solution quality, reliability, and adoption through high-quality tool output and meaningful metrics.

Roles & Responsibilities

You will bring strong hands-on DevOps engineering experience including CI/CD, Kubernetes, containers, Infrastructure as Code (Terraform), Ansible, and modern engineering platforms. Deep expertise in Python and AWS is required to personally build, automate, deploy, and operate solutions.

With at least seven years of relevant IT or engineering experience preferred, you will help evolve capabilities for automated threat modeling and material-change detection while maintaining a strong focus on reducing false positives and providing meaningful feedback loops.