Senior DevSecOps Engineer

Opportunity Details

Full Time Senior DevSecOps Engineer


New York, NY, Charlotte, NC, Southern California


Senior DevSecOps Engineer

Location: New York, NY, Charlotte, NC, Southern California (Hybrid - 3 days in office per week)

About the Role

We are seeking a Senior DevSecOps Engineer to join the Application Security team and help secure enterprise software delivery across the development lifecycle.

This highly technical role focuses on designing, implementing, and maintaining security solutions that integrate seamlessly into CI/CD pipelines. You will collaborate closely with software developers, DevOps engineers, infrastructure teams, and cybersecurity professionals to build secure, scalable, and automated development environments while promoting security best practices throughout the organization.

The ideal candidate is passionate about automation, cloud security, developer enablement, and embedding security early in the software development lifecycle.

Key Responsibilities

• Design and automate security controls integrated within CI/CD pipelines.
• Build and maintain tools and services that enable developers to easily adopt security solutions.
• Partner with software engineering teams to embed security principles into application design, development, and deployment.
• Support "Shift Left" security initiatives by incorporating security throughout the Software Development Lifecycle (SDLC).
• Lead testing, validation, and implementation of application security controls.
• Develop and maintain CI/CD security strategies, standards, and best practices.
• Implement defensive security controls across applications, cloud infrastructure, and enterprise environments.
• Serve as a technical escalation point for application security issues through resolution.
• Analyze vulnerability findings, assess business risk, and communicate remediation strategies to technical and non-technical stakeholders.
• Research emerging threats, tactics, techniques, and procedures (TTPs), and implement appropriate security controls.
• Collaborate with cross-functional teams to define security KPIs and operational metrics.
• Continuously improve security tooling by reducing false positives and enhancing developer experience.

Required Qualifications

• Bachelor's degree in Computer Science or a related field, or equivalent professional experience.
• 7+ years of experience in Information Technology, Information Security, Security Operations, or DevSecOps.
• Experience working within Agile environments using Scrum and/or Kanban.
• Hands-on experience with container technologies such as Docker and container orchestration platforms including Kubernetes.
• Strong knowledge of DevSecOps tools, including Terraform, Ansible, and CI/CD platforms.
• Experience securing workloads within Amazon Web Services (AWS).
• Strong understanding of application security principles and secure software development practices.
• Proficiency in designing, building, and deploying enterprise-scale engineering solutions.
• Advanced programming skills in Python; additional programming languages are a plus.
• Strong communication skills with the ability to articulate technical risks and remediation plans to diverse audiences.
• Demonstrated ability to influence cross-functional teams and drive security initiatives.

Preferred Qualifications

• Experience developing AI-powered or agentic software solutions.
• Experience building developer-focused security automation tools.
• Knowledge of modern vulnerability management processes and remediation workflows.
• Passion for continuous learning and researching emerging cybersecurity threats and technologies.

Benefits

• Comprehensive health, dental, and vision insurance.
• Retirement savings and employer-sponsored retirement programs.
• Performance-based bonus opportunities.
• Generous paid time off and flexible work arrangements.
• Professional development and continuous learning resources.
• Charitable giving and community engagement programs.
• Collaborative, inclusive, and growth-oriented work environment.

About the Organization

Our client is a leading global financial services and investment management organization committed to building secure, innovative technology solutions that support enterprise-scale applications and digital transformation. The organization fosters a collaborative culture focused on engineering excellence, continuous learning, and delivering secure technology solutions that drive long-term business success.