DevSecOps Engineer

Since 2012, we have grown to become one of the leading single‑family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work. Our goal is to simplify the experience of leasing a home through professional management and maintenance support, so residents can focus on what really matters to them, wherever they are in life. DevSecOps Engineer is responsible for embedding, auditing, and enforcing security across the entire software development lifecycle within modern DevOps and cloud environments. This role focuses on integrating security controls into CI/CD pipelines, DevOps tooling, and software engineering workflows to support secure‑by‑design development and delivery. Partners closely with internal engineering teams to design, implement, and enforce security controls across cloud infrastructure, application platforms, and automation pipelines, ensuring software can be built and deployed securely at scale. The engineer aligns security requirements with development practices to improve visibility and threat detection, and ensures consistent security standards across DevOps and software engineering tools. Contributions include foundational security operations, vulnerability management, and incident response efforts. Responsibilities Embed and enforce security throughout the SDLC by integrating automated controls (e.g., SAST, DAST, SCA, secrets detection, and IaC scanning) into CI/CD pipelines, DevOps tooling, and cloud‑native workflows. Collaborate with engineering teams to design, implement, and maintain scalable security controls across cloud infrastructure and application environments, ensuring consistent enforcement of company standards and compliance requirements. Drive comprehensive visibility and threat detection through centralized logging, monitoring, and alerting integrations to enable proactive identification of misconfigurations, anomalous behavior, and emerging threats across the production landscape. Develop and continually improve processes supporting the IT Security Framework, including vulnerability management, risk management, and remediation tracking. Conduct regular vulnerability scans across on‑premises and cloud environments, prioritize risks based on severity, exploitability, and business impact, and coordinate remediation with internal teams and external vendors. Serve as a primary responder for security incidents by triaging alerts, containing threats, performing root cause analysis, and producing detailed incident reports. Requirements High school diploma or GED required. Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field, or an equivalent combination of education and experience preferred. Minimum five (5) years of experience in IT Security. Minimum three (3) years of experience in DevOps Engineering. Experience with GitHub and Azure DevOps preferred. Experience with Kubernetes and Docker preferred. Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools. Experience in security incident management and reporting. Experience with vulnerability management and remediation. CISSP, Security+ (CASP+), or GCIH preferred. Excellent verbal and written communication, planning, analysis, and organizational skills. Strong troubleshooting and problem‑solving skills. Compensation The anticipated pay range/scale for this position is commensurate with experience. Actual starting base pay within this range will depend on geographic location, education, training, skills, and relevant experience. Additional Compensation This position is eligible to receive a discretionary annual bonus. Perks and Benefits Employees may participate in medical, dental, and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; an employee stock purchase plan; and a tuition reimbursement program. The company provides nine paid holidays per year and, upon hire, new employees accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year. CA Privacy Notice: To learn more about what information we collect when you apply for a job and how we use that information, please see our CA Job Applicant Privacy Notice at #J-18808-Ljbffr