DevSecOps Engineer

We are looking for a DevSecOps Engineer to join our product engineering team building high-quality desktop computational software. In this role, you will design, automate, and maintain secure development and deployment pipelines, ensure the integrity of our build and release processes, and embed security best practices throughout the product lifecycle. You will work closely with Engineering and Product to deliver secure, stable, and reliable desktop releases to customers.

• Manage on-prem and cloud build infrastructure (e.g,Jenkins, Bitbucket pipelines) across Windows and Linux platforms
• Design, implement, and maintain CI/CD pipelines for desktop application builds
• Build automation around desktop-specific technologies such as MSI/DMG packaging, signing, and auto-update frameworks.
• Manage build environments, artifact repositories, code-signing infrastructure, and related tooling.
• Optimize build performance, reliability, and reproducibility.
• Develop internal tools and scripts to improve developer productivity and security posture (Python, PowerShell, Bash, etc.).
• Embed security scanning (SAST, SCA, secrets scanning, dependency checks) into CI/CD pipelines.
• Ensure secure code signing, certificate rotation, and integrity verification for desktop releases.
• Work with Engineering to enforce secure coding guidelines and mitigate vulnerabilities.
• Implement and manage security controls for build systems, deployment infrastructure, and development tooling.
• Support threat modeling, risk assessments, and secure design reviews.
• Partner with development teams to identify security gaps early and shift-left security practices.
• Collaborate with QA to integrate automated tests and security checks into pipelines.
• Contribute to incident response and post-mortems related to build or release issues.
• Document processes, standards, and best practices for secure development and release.

• 2+ years in DevOps, Security Engineering, or related roles.
• Experience with CI/CD platforms (Jenkins, Bitbucket pipelines).
• Strong scripting skills (Python, Bash, PowerShell).
• Hands-on experience with security scanning tools (SAST, SCA, dependency scanning, container scanning).
• Understanding of secure build pipelines, code signing, and artifact integrity.
• Experience with desktop application build tools (MSBuild, CMake).
• Solid understanding of OS internals (Windows, Ubuntu, Redhat) from a developer or operations perspective
• Good understanding of job schedulers (LSF) and network file systems