DevSecOps

CareerUS Solutions; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

CareerUS Solutions is seeking a skilled DevSecOps Engineer to integrate security into our software development and deployment processes. You will collaborate with DevOps, development, and security teams to automate security testing, protect cloud infrastructure, and maintain secure CI/CD pipelines.

The ideal candidate will have hands-on experience across AWS/Azure/GCP, modern CI/CD tools, and IaC security controls.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Professional experience in DevOps, cloud security, application security, or infrastructure engineering.
• Strong understanding of secure software development and deployment practices.
• Experience automating infrastructure and security processes.

Responsibilities

• Integrate security practices into CI/CD pipelines and software development workflows.
• Implement and maintain automated security testing and vulnerability scanning.
• Secure cloud infrastructure, containers, Kubernetes clusters, and applications.
• Conduct vulnerability assessments and coordinate remediation activities.
• Implement Infrastructure as Code (IaC) security controls.
• Monitor security events, investigate issues, and support incident response.
• Establish security policies, standards, and best practices.
• Collaborate with developers to identify and resolve security weaknesses.
• Manage secrets, credentials, access controls, and identity permissions.
• Support compliance requirements and maintain security documentation.
• Automate security checks and reporting across development environments.

Skills

CI/CD

Jenkins

GitHub Actions

GitLab CI/CD

AWS

Azure

Google Cloud

Vulnerability Management

Application Security

Threat Modeling

Python

Bash

PowerShell

Terraform

CloudFormation

SAST

DAST

SCA

IAM

RBAC

Secrets Management

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

Git

GitHub

GitLab

Jenkins

Kubernetes

Docker

Job description

We are looking for a skilled DevSecOps Engineer to integrate security into our software development and deployment processes. The ideal candidate will work closely with DevOps, development, and security teams to automate security testing, protect cloud infrastructure, identify vulnerabilities, and maintain secure CI/CD pipelines.

Key Responsibilities

• Integrate security practices into CI/CD pipelines and software development workflows.
• Implement and maintain automated security testing and vulnerability scanning.
• Secure cloud infrastructure, containers, Kubernetes clusters, and applications.
• Conduct vulnerability assessments and coordinate remediation activities.
• Implement Infrastructure as Code (IaC) security controls.
• Monitor security events, investigate issues, and support incident response.
• Establish security policies, standards, and best practices.
• Collaborate with developers to identify and resolve security weaknesses.
• Manage secrets, credentials, access controls, and identity permissions.
• Support compliance requirements and maintain security documentation.
• Automate security checks and reporting across development environments.

Required Skills

• DevOps: CI/CD, Jenkins, GitHub Actions, GitLab CI/CD
• Cloud: AWS, Azure, or Google Cloud
• Security: Vulnerability Management, Application Security, Threat Modeling
• Scripting: Python, Bash, or PowerShell
• Infrastructure as Code: Terraform, CloudFormation
• Security Testing: SAST, DAST, SCA
• Version Control: Git, GitHub, GitLab
• Identity & Access: IAM, RBAC, Secrets Management

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Professional experience in DevOps, cloud security, application security, or infrastructure engineering.
• Strong understanding of secure software development and deployment practices.
• Experience automating infrastructure and security processes.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and with cross-functional remote teams.