Senior/Staff DevSecOps Engineer

Responsibilities

• Own runtime security and vulnerability management across cloud and container environments, including triage, prioritization, and remediation tracking.
• Design and enforce least-privilege identity and access management across AWS and internal systems.
• Own secrets and credentials management, including policies, tooling, rotation, and developer workflows.
• Lead security incident response, including detection, containment, root cause analysis, post-mortems, and durable remediation.
• Manage AWS Organizations, account boundaries, service control policies, and security guardrails.
• Harden CI/CD pipelines by embedding security scanning and policy enforcement into software delivery.
• Drive compliance programs by owning evidence, controls, and remediation work.
• Build secure-by-default repository, pipeline, and infrastructure templates.
• Automate certificate issuance, secrets access, policy-as-code, and developer-facing security tooling.
• Provide practical security guidance and shape the DSO function as it scales, including contributing to hiring and team building.

Requirements

• 8+ years of experience in DevSecOps, platform security, or a closely related security engineering role.
• Deep hands-on AWS experience, including IAM, SCPs, Organizations, GuardDuty, Security Hub, and CloudTrail.
• Strong Terraform and infrastructure-as-code experience, including security controls and policy-as-code or continuous compliance tooling such as OPA, Checkov, tfsec, or AWS Config Rules.
• End-to-end production experience owning secrets management.
• Experience designing and hardening CI/CD pipelines, including GitHub Actions.
• Hands-on container security experience, including image scanning and runtime controls.
• Experience leading or meaningfully contributing to a compliance program; CMMC Level 2 or NIST SP 800-171 experience is strongly preferred.
• Experience running incident response, participating in on-call operations, leading post-mortems, and shipping remediation.
• Strong communication, judgment, ownership, and ability to drive security adoption through enablement.
• Experience growing a DSO or security engineering function, configuration management experience with Ansible or similar, familiarity with observability tooling, and experience building developer-facing security platforms are preferred.
• U.S. citizenship and eligibility to obtain and maintain a U.S. Government security clearance are required.

Benefits

• Onsite, full-time role in a controlled work environment.
• Medical, dental, vision, life, AD&D, and disability plan options.
• Paid parental leave, including 12 weeks for birthing parents, 4 weeks for non-birthing parents, and 6 weeks for adoptive, foster, or intended parents through surrogacy.
• Paid holidays and flexible PTO.
• 401(k) pre-tax and Roth options, HSA/FSA options, and dependent care FSA.