Senior DevSecOps Engineer

What you'll do

• Define and own the DevSecOps architecture and roadmap for embedded capital equipment platforms.
• Establish secure software supply chain practices, including SBOM generation and vulnerability monitoring.
• Develop reusable CI/CD templates for static analysis, unit testing, and artifact signing.
• Lead threat modeling and cybersecurity risk analysis for embedded platform components.
• Manage the lifecycle of CVE intake, triage, risk scoring, and remediation planning.
• Implement secure boot, firmware signing, and authenticated update mechanisms for devices.
• Support regulatory submissions by ensuring all DevSecOps evidence is traceable and compliant.
• Provide technical leadership and mentoring to engineers on secure coding and build automation.

What we're looking for

• Candidates must possess unrestricted U.S. work authorization at the time of hire and for the duration of employment.
• Experience with embedded Linux security, CI/CD automation, and software supply chain controls is required.
• Proficiency in Python, Bash, and Go programming languages is required.
• Experience with hardware platforms including AMD Zynq, NVIDIA ORIN, and various RTOS systems is required.
• Familiarity with tools such as Docker, Snyk, SonarQube, Bitbucket, Jira, Bamboo, and Confluence is required.
• Knowledge of secure boot, firmware signing, and cryptographic configuration is required.
• Experience with cloud infrastructure (AWS or similar) and modern DevOps practices is preferred.
• Familiarity with regulatory standards such as FDA cybersecurity expectations, IEC 62304, ISO 14971, and ISO 13485 is preferred.