DevSecOps Engineer, Information Security

What you'll do

• Design and integrate DevSecOps, Application Security, and Vulnerability Management capabilities across the enterprise.
• Implement secure SDLC practices including automated testing, threat modeling, and secure coding standards.
• Integrate and tune AppSec tools like SAST, DAST, SCA, and container scanning into CI/CD pipelines.
• Own and optimize CNAPP platforms to improve cloud security posture and workload protection.
• Establish security guardrails for AI-generated code and secure AI-enabled applications against prompt injection and data exposure.
• Develop and execute risk assessment methodologies and security incident response plans.
• Partner with engineering teams to reduce the vulnerability backlog and mean time to repair (MTTR).
• Define KPIs and reporting for security posture, pipeline coverage, and risk reduction.

What we're looking for

• Requires a BS/BA in Information Technology or a related field of study.
• Requires a minimum of 8 years of experience in systems administration and security aspects of information systems.
• Requires experience with network communications, computer networking, telecommunications, and systems development and management.
• Requires experience with multiple technical and business disciplines.
• Requires experience in DevSecOps, Application Security, or Cloud Security (preferred).
• Requires experience integrating security into CI/CD pipelines at scale (preferred).
• Requires experience with CNAPP platforms such as Wiz or Prisma Cloud (preferred).
• Requires security certifications such as CISSP, CCSP, or CSSLP (preferred).