AI-Driven DevSecOps Engineer

Altera Corporation; San Jose, Northern (CA, KY); Hybrid; USD 149,000 - 216,000; Full time

Job summary

Altera Corporation is seeking an AppSec/DevSecOps Engineer to strengthen security across a global semiconductor organization. The role embeds security into the SDLC, automates security testing, and enables developers while coordinating with engineering, IT, and business teams.

The ideal candidate brings deep AppSec expertise, practical DevSecOps experience, and strong collaboration skills to advance secure development practices and reduce software supply chain risk.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, Information Systems, or related field; equivalent experience may be considered.
• 6+ years of professional AppSec/DevSecOps experience.
• Hands-on with secure SDLC, application security, secure-by-design, or DevSecOps activities.
• Experience with CI/CD or modern software engineering environments.
• Experience with at least three: SAST, DAST, SCA, secrets scanning, IaC scanning, container security, API security, threat modeling, or vulnerability management.
• Experience translating policies/standards into technical controls, engineering requirements, security procedures, or SDLC workflows.
• Experience with at least one cloud or cloud-native environment (Azure, AWS, Kubernetes).
• Experience using engineering/security platforms such as Azure DevOps, GitHub, GitLab, Jenkins, Jira, ServiceNow.
• Ability to conduct or support application security assessments and communicate findings.
• Strong written and verbal communication; ability to manage multiple priorities.
• Ability to work independently and collaborate across distributed teams.

Responsibilities

• Define and maintain secure SDLC standards, procedures, and developer guidance.
• Embed security across planning, architecture, design, coding, testing, release, deployment, and operations.
• Develop security gates based on risk and deployment model.
• Support secure architecture reviews, threat modeling, and go-live risk assessments.
• Establish secure coding standards for languages, frameworks, APIs, cloud services.
• Track findings, remediation, exceptions, and risk acceptance.
• Measure secure SDLC adoption and remediation timeliness.
• Implement and operate SAST, DAST, SCA, secrets detection, container and IaC scanning.
• Integrate tooling into CI/CD pipelines with patterns, plugins, and automation.
• Monitor tool health, coverage, backlog, and remediation performance.
• Develop reusable integrations, scripts, dashboards, and automation assets.
• Support AI-assisted vulnerability triage and remediation where appropriate.
• Perform assessments across web/APIs/mobiles/cloud/developer platforms.

Skills

Bachelor's degree or related

6+ years experience

CI/CD

Threat modeling

Cloud security

Automation tooling

Communication

Independent work

Education

Bachelor’s degree in Computer Science or related

Tools

Azure DevOps

GitHub

GitLab

Jenkins

Jira

Job description

Altera Corporation is seeking an AppSec/DevSecOps Engineer to strengthen security across a global semiconductor organization. The role embeds security into the SDLC, automates security testing, and enables developers while coordinating with engineering, IT, and business teams.

The ideal candidate brings deep AppSec expertise, practical DevSecOps experience, and strong collaboration skills to advance secure development practices and reduce software supply chain risk.