Top DevSecOps Engineer Jobs

Own DevSecOps and security automation across CI/CD pipelines, AWS, Kubernetes, Terraform, and software supply chains. Build secure golden paths, vulnerability management, secrets management, policy enforcement, and automated remediation. Partner with Security, SRE, Developer Experience, and Engineering teams to improve cloud security, reduce developer friction, implement AI-assisted security reviews, and measure remediation outcomes. Drive secure development practices through documentation, education, and cross-functional influence.

Own and mature the company’s DevSecOps and cloud security function. Responsibilities include implementing SOC 2 controls, automating compliance evidence, managing cloud security posture and runtime security, embedding security gates into CI/CD, leading vulnerability remediation, developing auto-remediation and AI-assisted workflows, and securing infrastructure through Terraform and policy-as-code. The role also partners with GRC and corporate security teams while building reusable security tooling and developer-platform guardrails.

Designs, develops, tests, and troubleshoots software for space systems. Responsibilities include writing maintainable code, using Git, participating in code reviews, documenting software and processes, collaborating with senior engineers, and staying current with software development and space technology trends. The role may support DevOps and DevSecOps practices, including CI/CD, containers, cloud platforms, infrastructure as code, orchestration, and monitoring.

Own application security guardrails and tooling for a SaaS payment platform. Responsibilities include tuning SAST and SCA tools, integrating security checks into CI/CD pipelines, conducting manual web and API penetration tests, threat modeling, validating exploits, managing WAF and secrets security, triaging vulnerabilities, and reporting remediation metrics. The role partners closely with engineering, platform, and technology debt teams to reduce security risk while maintaining development velocity.

Design and maintain secure CI/CD pipelines, AWS infrastructure, Terraform modules, Kubernetes environments, and observability systems. Integrate DevOps and security tooling to automate compliance evidence collection, continuous monitoring, remediation, and authorization workflows. Support FedRAMP and other regulated environments while troubleshooting production issues, documenting systems, and improving deployment reliability. Serve as a technical bridge between customers and engineering teams across cloud, hybrid, and classified environments.

Deploys and operationalizes the Kovr AI Platform across cloud, hybrid, and classified environments. Designs secure CI/CD pipelines, manages AWS infrastructure with Terraform, administers Kubernetes/EKS workloads, implements NIST-aligned controls, and integrates DevOps and security tooling. The role develops observability strategies, supports continuous monitoring and audit readiness, troubleshoots production issues, documents infrastructure, and engages customers on technical deployment challenges.

Builds and operates secure development, deployment, and infrastructure systems for microservice applications. Responsibilities include automating delivery processes, maintaining Docker and Kubernetes environments, developing Helm charts and manifests, managing GitLab CI/CD pipelines and GitOps deployments with Argo CD, troubleshooting distributed systems, and integrating security, scanning, networking, authentication, secrets management, and observability across the software delivery lifecycle.

Provides DevSecOps and cybersecurity engineering across Agile SDLC and CI/CD environments. Integrates security controls, automated testing, vulnerability remediation, and shift-left practices into software development. Translates RMF, NIST, DoD STIG, and SRG requirements into technical controls and engineering tasks. Advises teams on secure APIs, microservices, containers, cloud-native architectures, authentication, encryption, and network segmentation while coordinating multiple projects and stakeholders.

Develop and secure CI/CD pipelines for safety-critical lunar lander software. Partner with developers and cybersecurity teams to implement security standards, CMMC certification efforts, and NIST 800-53 controls. Mentor engineers on secure development practices, analyze pipeline performance, improve stability through monitoring and code reviews, and create tooling that strengthens compliance while preserving engineering efficiency.

The Senior DevSecOps Engineer embeds security throughout software development and operations. Responsibilities include implementing CI/CD security guardrails, automated SAST, DAST, SCA, secrets, and IaC scanning; managing cloud vulnerability, configuration, detection, and response tooling; supporting patching, hardening, audits, SDLC governance, incident response, and security documentation. The role requires strong cloud security, scripting, automation, compliance, penetration testing familiarity, and communication skills.

Build and maintain secure cloud infrastructure, CI/CD pipelines, and infrastructure-as-code solutions. Implement security controls, automate deployments, manage AWS or Azure environments, Docker containers, Kubernetes clusters, and release processes. Assess architectures for vulnerabilities, troubleshoot infrastructure and network issues, and support NIST 800-53 compliance. The role also develops Python automation, integrates security into the software lifecycle, and uses tools such as Terraform, Ansible, Jenkins, Spinnaker, and GitHub Copilot.

Build and maintain secure cloud infrastructure, Infrastructure as Code, CI/CD pipelines, containerized environments, and Kubernetes platforms. Automate deployment and security workflows using Python, Terraform, Ansible, Jenkins, Spinnaker, and related tools. Assess architectures for vulnerabilities, implement NIST 800-53 controls, troubleshoot infrastructure and network issues, and improve scalability, reliability, compliance, and deployment efficiency across AWS or Azure environments.

Build and maintain secure cloud infrastructure, Infrastructure as Code, CI/CD pipelines, and containerized environments. Assess architectures for vulnerabilities, implement security controls, automate deployments and operational tasks, and troubleshoot infrastructure, network, security, and release issues. The role requires AWS or Azure, Terraform, Kubernetes, Docker, Python, Bash, Jenkins, Spinnaker, and compliance with NIST 800-53. It also involves developing security automation and using AI-assisted development tools.

Designs and maintains secure CI/CD pipelines, automates infrastructure provisioning across VMware and cloud environments, integrates security testing and compliance controls, and supports security platform migrations into dedicated enclaves. The role implements logging, monitoring, alerting, and secure configurations while collaborating with cybersecurity and infrastructure teams. Requires an active TS/SCI clearance and extensive DevSecOps engineering experience.

Design, deploy, and operate secure, containerized systems in air-gapped/classified environments. Build and optimize production CI/CD pipelines, author Infrastructure-as-Code, embed security and observability, mentor military and government personnel, and prototype responsible AI/ML capabilities within classified constraints.

Designs and owns secure, automated CI/CD pipelines in an onsite customer environment. Integrates security throughout the software lifecycle, automates infrastructure with Terraform, Ansible, or CloudFormation, secures cloud and containerized workloads, and implements vulnerability scanning, application analysis, compliance monitoring, logging, and alerting. The role also establishes security policies and guardrails, collaborates with development and operations teams, and requires an active Top Secret clearance or the ability to obtain one.

Provides cybersecurity engineering throughout the software development lifecycle for a DISA customer. Integrates security controls into Agile development and CI/CD pipelines, implements automated security testing, applies shift-left DevSecOps practices, and translates RMF, NIST, DoD STIG, and SRG requirements into technical controls. Advises developers, architects, ISSOs, and system owners on application, cloud, API, microservices, container, authentication, encryption, and network security while managing multiple concurrent development efforts.

Provides DevSecOps and security engineering expertise for DoD applications across the SDLC. Integrates cybersecurity controls into Agile development and CI/CD pipelines, implements automated security testing, translates RMF, NIST, STIG, and SRG requirements into technical tasks, supports cloud-native and modern application architectures, and guides vulnerability remediation and secure control implementation across multiple concurrent projects.

Own and improve TinyFish’s vulnerability-management program across AWS infrastructure, applications, containers, CI/CD, and production services. Implement security controls, automate security testing and compliance checks, conduct threat modeling, coordinate penetration tests, and drive findings through verified remediation. Support incident response, security logging, detection engineering, SOC 2 and ISO 27001 initiatives, and security reporting while partnering with engineering and leadership.

Supports secure DevSecOps environments for a federal agency by integrating security testing, compliance automation, and cybersecurity controls into software pipelines. Responsibilities include implementing CI/CD security gates, analyzing cybersecurity gaps, automating security tasks through APIs, conducting SAST/DAST and quality assurance testing, coordinating remediation, and maintaining pipeline architecture documentation. The role collaborates with developers, security engineers, and compliance stakeholders in an Agile/Scrum environment.

Designs and maintains secure CI/CD pipelines, infrastructure-as-code, and DevSecOps tooling across AWS and classified environments. Integrates security scanning and STIG compliance, manages Kubernetes or OpenShift infrastructure, troubleshoots Linux systems, supports ATO efforts, advises development teams on secure coding and vulnerability remediation, and mentors junior engineers.

Designs, implements, and maintains secure CI/CD pipelines, Kubernetes deployments, and infrastructure across on-premises, cloud, and air-gapped environments. Uses Terraform or Ansible, GitOps, containerization, observability, and security tooling to enable reliable software delivery. Responsibilities include designing and debugging complex development environments, improving engineering workflows, ensuring compliance, collaborating with development teams, and mentoring engineers.

Designs, deploys, and maintains secure software development environments across on-premises, cloud, and air-gapped systems. Builds CI/CD pipelines, Kubernetes deployments, and infrastructure using Terraform or Ansible. Implements observability, security tooling, GitOps workflows, and containerized delivery processes. Collaborates with development teams to improve efficiency, reliability, compliance, and reproducibility. Responsibilities include coding, testing, debugging, monitoring, and maintaining DevSecOps environments.

Design, implement, and maintain secure software development environments, CI/CD pipelines, Kubernetes deployments, and infrastructure across on-premises, cloud, and air-gapped environments. Build infrastructure with Terraform or Ansible, implement observability, integrate security throughout the development lifecycle, and improve reproducible software delivery. Collaborate with development teams, mentor engineers, troubleshoot complex systems, and support stringent compliance requirements.

Develops and maintains secure, automated cloud CI/CD pipelines and infrastructure using DevSecOps practices. Automates deployments, testing, security workflows, and remediation with Ansible, Terraform, Packer, Python, and PowerShell. Administers endpoint detection, privilege management, and secure access platforms; monitors and responds to security events; supports vulnerability remediation, hardening, compliance, and incident response. Collaborates across engineering, operations, architecture, and security teams while maintaining technical documentation and operational procedures.