DevSecOps Engineer

AMH Internet Solutions, Inc.; Draper (UT); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) with company matching contributions

Paid time off (PTO)

Annual bonus eligibility

Tuition reimbursement program

Job summary

AMH Internet Solutions, Inc. in Draper, UT is looking for a DevSecOps Engineer to integrate security controls throughout the software development lifecycle. Responsibilities include collaborating with engineering teams to design security frameworks and conducting vulnerability management. Candidates should have at least five years of IT Security experience and familiarity with DevOps practices such as Github, Azure DevOps, and CI/CD pipelines. The role comes with comprehensive benefits including health insurance, 401(k), and paid holidays.

Qualifications

• Minimum five years of experience in IT Security.
• Minimum three years of experience in DevOps Engineering.
• Experience in Security incident management and reporting.

Responsibilities

• Embed and enforce security in the SDLC.
• Collaborate to design and implement security controls.
• Conduct regular vulnerability scans and remediation.

Skills

IT Security

DevOps Engineering

Communication Skills

Troubleshooting

Problem-solving

Education

Bachelor’s degree in Computer Science or related field

High school diploma or GED

Tools

Github

Azure DevOps

Kubernetes

Docker

Dynamic Application Security Testing (DAST)

Static Application Security Testing (SAST)

Job description

DevSecOps Engineer page is loaded## DevSecOps Engineerlocations: Draper, UTtime type: Full timeposted on: Posted Yesterdayjob requisition id: JR101661Since 2012, we've grown to become one of the leading single-family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work(R). At AMH, our goal is to simplify the experience of leasing a home through professional management and maintenance support, so our residents can focus on what really matters to them, wherever they are in life.The **DevSecOps Engineer** is responsible for embedding, auditing, and enforcing security across the entire software development lifecycle within modern DevOps and cloud environments. This role focuses on integrating security controls into CI/CD pipelines, DevOps tooling, and software engineering workflows to support secure-by-design development and delivery. Partners closely with internal engineering teams to design, implement, and enforce security controls across cloud infrastructure, application platforms, and automation pipelines ensuring software can be built and deployed securely at scale. Aligns security requirements with development practices to improve visibility and threat detection and ensures consistent security standards across DevOps and software engineering tools. Contributes to foundational security operations which includes vulnerability management and assisting with incident response efforts.**Responsibilities:*** Embeds and enforces security throughout the Software Development Life Cycle (SDLC) by integrating automated controls (e.g., SAST, DAST, SCA, secrets detection, and IaC scanning) into CI/CD pipelines, DevOps tooling, and cloud-native workflows. Partners with development and platform teams to identify and remediate security vulnerabilities early in the development process while maintaining development speed and minimizing release delays.* Collaborates with engineering teams to design, implement, and maintain scalable security controls across cloud infrastructure and application environments, to ensure consistent enforcement of company standards and compliance requirements. Drives comprehensive visibility and threat detection through centralized logging, monitoring, and alerting integrations to enable proactive identification of misconfigurations, anomalous behavior, and emerging threats across the production landscape.* Develops and continually improves processes supporting the IT Security Framework to include vulnerability management, risk management, and remediation tracking. Conducts regular vulnerability scans across on-premises and cloud environments while prioritizing risks based on severity, exploitability, and business impact. Coordinates remediation with internal teams and external vendors to ensure timely closure and measurable risk reduction.* Serves as a primary responder for security incidents by triaging alerts, containing threats, performing root cause analysis, and producing detailed incident reports documenting findings, response actions, and lessons learned. Identifies and investigates actual or suspected security violations, conducts thorough follow-up analysis and provides recommendations to prevent recurrence and strengthen the company’s overall security posture.**Requirements:*** High school diploma or GED required* Bachelor’s degree in Computer Science, Information Technology, Information Security, and/or a related field or an equivalent combination of education and experience preferred* Minimum five (5) years of experience in IT Security* Minimum three (3) years of experience in DevOps Engineering* Experience with Github and Azure DevOps preferred* Experience with Kubernetes and Docker preferred* Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools* Experience in Security incident management and reporting* Experience with vulnerability management and remediation* CISSP, SecurityX (CASP+), or GCIH preferred* Excellent verbal and written communication, planning, analysis and organizing skills* Strong troubleshooting and problem-solving skillsCompensationThe anticipated pay range/scale for this position is commensurate with experience. Actual starting base pay within this range will depend on factors including geographic location, education, training, skills, and relevant experience.Additional CompensationThis position is eligible to receive a discretionary annual bonus.Perks and BenefitsEmployees have the opportunity to participate in medical, dental and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; employee stock purchase plan; and a tuition reimbursement program. The Company provides 9 paid holidays per year, and, upon hire, new employees will accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year.**CA Privacy Notice:**To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found at .#LI-PH1At AMH, we’re redefining what it means to make a home yours. And we’re doing it with care. As a leading single-family rental company and homebuilder in the nation, we work daily to deliver an exceptional resident experience. Our goal is to make leasing a home easy, so you can focus on what really matters to you, wherever you are in life.That’s why we offer more than 60,000 single-family homes across the U.S., located in vibrant neighborhoods. Our beautiful houses are move-in ready, pet-friendly, and equipped with outdoor space and ample room for all your household’s needs. Our custom Let Yourself In(R) technology allows you to tour a property on your own schedule, without an agent present. And our streamlined leasing process empowers you to apply and receive a lease for signature, all online. Once you’ve moved in, we simplify your day-to-day through online customer solutions and professional maintenance support, so you can enjoy your weekends stress-free. Whether you’re looking for peace of mind, don’t want to deal with the costs of ownership, or simply want the flexibility of renting, AMH has you covered. Just ask our nearly 200,000 residents. Learn more:American Homes 4 Rent, LP (“AMH”) provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, gender identity, sexual orientation, marital status, pregnancy, status as a parent, national origin, age, disability (physical or mental), family medical history or genetic information, political affiliation, military service, or other non-merit based factors. AMH provides reasonable accommodations to qualified individuals with disabilities. To request an accommodation, email [e-mail]. . In addition to federal law requirements, AMH complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. . . Illinois Privacy Notice: . Information regarding our collection and use of your personal information can be found . CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found . Background check required. AMH will consider for employment qualified applicants with arrest or conviction records in accordance with all applicable federal, state, and local laws, which may include the Los Angeles County Fair Chance Ordinance for Employers and the Act.