DevSecOps & AI/Automation Engineer – Secure SDLC

191 Altera Corporation

San Jose (CA)

On-site

USD 149,000 - 216,000

Full time

4 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Altera in San Jose, CA is seeking an AppSec/DevSecOps Engineer to strengthen application security and software supply chain security. You will embed security into the SDLC, perform assessments, automate security testing, and enable developers to ship secure software across a global organization.

The role involves implementing SAST/DAST, SCA, secrets detection, and IaC scanning within CI/CD pipelines, while collaborating with engineering and Cloud teams to maintain secure architectures and

Qualifications

Bachelor's degree in a related technical field or equivalent work experience.
6+ years of professional experience in AppSec, DevSecOps, or secure SDLC.

Responsibilities

Define and maintain secure SDLC standards and developer guidance.
Embed security requirements across planning, design, coding, testing, release, and operations.
Develop security gates based on risk, data sensitivity, and deployment model.
Perform threat modeling, secure design reviews, and vulnerability remediation planning.
Integrate SAST, DAST, SCA, secrets detection, and IaC scanning into CI/CD pipelines.
Mentor developers and promote security-by-design across distributed teams.

Skills

AppSec expertise

DevSecOps practice

Threat modeling

CI/CD security

SAST/DAST tooling

Cloud security

Education

Bachelor's degree in Computer Science or related

Tools

Azure DevOps

GitHub Actions

Jenkins

Job description

The role involves implementing SAST/DAST, SCA, secrets detection, and IaC scanning within CI/CD pipelines, while collaborating with engineering and Cloud teams to maintain secure architectures and

Get your free, confidential resume review.

or drag and drop your file here.