Lead DevSecOps Engineer

Responsibilities

• Lead the development, implementation, and continuous improvement of the enterprise Secure Software Development Lifecycle program and secure development standards.
• Architect and mature CI/CD security capabilities, including secure build processes, deployment workflows, container images, dependencies, automated testing, policy enforcement, and continuous compliance controls.
• Lead the architecture, implementation, governance, monitoring, and maintenance of application security tooling and security visibility capabilities.
• Perform threat modeling, application risk assessments, secure code reviews, vulnerability management, remediation tracking, and vulnerability disclosure activities.
• Provide security leadership and strategic guidance to Engineering, DevOps, Platform, Infrastructure, GRC, and Information Security teams.
• Lead security audits, evidence collection, control testing, compliance assessments, and application or development-environment incident response support.

Requirements

• BA/BS degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field is required; an advanced degree is preferred.
• At least five years of experience in DevSecOps, Application Security, Security Engineering, or related cybersecurity roles is required.
• Experience integrating security throughout the software development lifecycle, including CI/CD pipelines and modern software delivery platforms.
• Hands-on experience with SAST, DAST, SCA, container security solutions, application security testing, threat modeling, risk assessments, vulnerability management, and remediation tracking.
• Experience implementing monitoring, alerting, and security controls across cloud, application, and infrastructure environments.
• Knowledge of SSDLC practices, secure coding principles, OWASP Top 10, NIST SSDF, container technologies, and cloud-native application deployment models.
• Familiarity with Laravel and other enterprise web application frameworks.
• Programming experience with JavaScript, Python, Ruby, PHP, or C#.
• Experience with GitHub Actions, Jenkins, CircleCI, Azure DevOps, or similar CI/CD platforms.
• Relevant certifications such as CISSP, CSSLP, GWAPT, GCSA, AWS Security Specialty, Microsoft Azure Security Engineer Associate, CKS, or equivalent are preferred.
• Strong stakeholder management, communication, analytical, troubleshooting, collaboration, ownership, and prioritization skills, including the ability to work with globally distributed teams across multiple time zones.

Benefits

• Comprehensive medical, dental, and vision insurance.
• Paid holidays, vacation, and sick time.
• Company-paid basic life insurance and voluntary life insurance.
• Parental leave.
• 401(k) plan with a current employer match of 3%.
• Flexible spending accounts, health savings account options, and wellness offerings.
• The role is eligible for a bonus under the current bonus plan requirements.
• The pay scale shown applies to the LA Metro area, and actual pay may vary by geographic region.