Staff DevSecOps Engineer

Skills

About the Role

You will design, build, and automate security controls for cloud infrastructure, software delivery systems, and containerized workloads. You will create hardened images, integrate security scanning into CI/CD, manage identity and secrets controls, produce audit evidence, remediate weaknesses, and establish reusable security patterns across teams.

Requirements

• 5+ years of related experience for Senior Engineer or 7+ years for Staff Engineer
• Experience implementing security controls in AWS or another major cloud environment
• Experience with infrastructure as code and automated infrastructure provisioning
• Experience securing containerized workloads and hardened container images
• Experience integrating security tooling into CI/CD or software delivery systems
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation
• Experience implementing identity, secrets, and access controls
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services
• Build and maintain hardened container images and secure base images
• Integrate vulnerability, dependency, container, and configuration scanning into delivery systems
• Automate security and compliance checks
• Implement secrets management, identity, and access controls
• Build audit evidence, configuration validation, and compliance reporting mechanisms
• Identify security weaknesses and drive remediation
• Define reusable security engineering patterns and drive their adoption

Benefits

• Bonus
• Benefits
• Equity