DevSecOps Engineer

Job Description
Position Overview
The Sr. DevSecOps Engineer serves as a senior technical contributor responsible for designing, implementing, and continuously improving the organization's secure software delivery and application security capabilities. This role focuses on building scalable, resilient DevSecOps solutions that integrate security into software development, platform engineering, and operational workflows. The ideal candidate brings deep hands-on expertise in secure software development lifecycle (SSDLC), application security, automation, and DevSecOps engineering practices. This role operates with a high degree of autonomy and is responsible for making sound technical decisions in complex engineering environments. The Sr. DevSecOps Engineer partners closely with application development, platform engineering, cybersecurity engineering, cloud, infrastructure, and architecture teams to embed security into engineering workflows, reduce application and platform risk, and improve the reliability and scalability of secure software delivery practices. This role also provides technical mentorship and guidance to junior engineers without direct people management responsibility.
A Day In The Life


DevSecOps Engineering & Secure Software Delivery Leadership
• Design, implement, and continuously improve secure software delivery pipelines and DevSecOps engineering capabilities across the enterprise.
• Lead implementation of application security controls including static analysis, dependency validation, secret detection, container security, and
infrastructure-as-code security validation.
• Drive maturation of secure software development lifecycle (SSDLC) practices including secure coding standards, threat modeling, security
validation, and vulnerability remediation workflows.
• Develop scalable automation and engineering solutions to improve security, consistency, and operational efficiency across development and
deployment workflows.
• Troubleshoot and resolve complex DevSecOps tooling, integration, and engineering issues across development and platform environments.
• Define and maintain DevSecOps standards, secure engineering patterns, and operational best practices.


Cross-Functional Technical Leadership
• Partner closely with application development, platform engineering, infrastructure, cloud, and cybersecurity teams to integrate security into
engineering and deployment processes.
• Influence architecture and design decisions related to secure software delivery and application security.
• Serve as a senior technical resource during complex application security or DevSecOps-related incidents and operational issues.
• Support engineering teams in addressing security findings, remediation planning, and operational improvements.
• Communicate technical risks, architectural concerns, and security recommendations clearly to stakeholders.


Automation, Mentorship & Continuous Improvement
• Design and implement advanced automation supporting secure development, validation, and operational engineering workflows.
• Improve engineering reliability, observability, and operational readiness of DevSecOps tooling and integrations.
• Mentor junior engineers through technical guidance, code reviews, and engineering best practices.
• Influence DevSecOps tooling strategy and operational improvements through hands-on technical expertise.
• Maintain comprehensive documentation for engineering standards, automation, workflows, and integrations.


Candidate Must Have
• 7+ years of experience IT
• 5+ technical cybersecurity experience (3+ DevSecOps)
• Deep understanding of secure software development lifecycle (SSDLC) practices and modern application security principles.
• Strong experience designing and implementing secure CI/CD and DevSecOps workflows.
• Advanced scripting, automation, and infrastructure-as-code experience.
• At least 1 expert level cybersecurity certification such as CISSP, CASP, CCSP, etc.