Lead InfoSec Engineer, DevSecOps

What you'll do

• Embed automated security controls and risk-based gates into CI/CD pipelines across build, test, and release stages.
• Build and maintain scalable internal DevSecOps tooling, including reusable pipeline libraries and automation frameworks.
• Design "paved road" security patterns and self-service tools to provide a seamless developer experience.
• Implement cloud-native security architecture for Kubernetes, containerized workloads, and infrastructure-as-code across AWS and Azure.
• Evaluate and integrate best-of-breed security tools to standardize and consolidate the organization's security stack.
• Translate regulatory requirements into automated engineering controls to ensure continuous compliance and audit readiness.
• Lead vulnerability management and remediation efforts across application, pipeline, and cloud environments.
• Conduct threat modeling and architecture reviews to ensure security is embedded at the design level.

What we're looking for

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.
• 8+ years of experience in software engineering, DevOps, or DevSecOps roles within enterprise or regulated environments.
• Practical expertise with cloud platforms (AWS, Azure, or Google Cloud) and containerization technologies like Docker and Kubernetes.
• Proficiency with infrastructure-as-code tools such as Terraform, CloudFormation, or Pulumi.
• Strong understanding of application security concepts including OWASP Top 10 and experience with SAST, DAST, and SCA platforms.
• Ability to build and maintain internal tooling using scripting languages like Python or Go.
• Experience with modern development practices including CI/CD pipeline design, Git version control, and agile methodologies.
• Excellent technical communication skills to articulate security risks and solutions to engineering teams and stakeholders.