DevSecOps Engineer/Lead
Description
Role Overview
Help us build the future of secure software by embedding security directly into our development pipelines. You'll lead efforts to automate security checks, ensuring code is compliant and protected from day one.
What We're Looking For
- 4+ years in DevOps, SWE, or AppSec, with 2+ years in DevSecOps
- Deep experience with SAST (Checkmarx, Semgrep), SCA (Snyk), and DAST (Burp Suite)
- Proven success automating security in CI/CD (GitHub Actions, GitLab CI)
- Strong understanding of IaC (Terraform) and containerization (Docker, Kubernetes)
- Ability to read code in Python, Java, Go, or Node.js
- Bonus: CDP, CDEP, or CSSLP certifications
What You'll Do
- Integrate and manage security tools (SAST, DAST, SCA) into CI/CD pipelines
- Triage and provide clear remediation guidance for code vulnerabilities
- Automate security policy enforcement within deployment pipelines
- Optimize AppSec tooling to reduce false positives and streamline alerts
Why You'll Love It
- **Shape security strategy** for a growing tech company
- Work with cutting-edge DevSecOps tools and practices
- Opportunity to mentor and lead security initiatives