DevSecOps Engineer

Henderson Scott US; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Henderson Scott US partners with a leading organization in New York to hire a hands-on DevSecOps Engineer for its cybersecurity team. You will integrate security into applications, CI/CD pipelines, and cloud environments while collaborating with development, cloud, and security groups.

The role emphasizes automating security controls, threat modeling, secure code reviews, and improving reporting and self-service for developers. A strong background in DevSecOps and cloud platforms is required.

Qualifications

• 7+ years IT/engineering experience, with 5+ years in DevSecOps or security engineering.
• Strong CI/CD security experience and hands-on tooling.
• Experience with AWS and/or Azure.

Responsibilities

• Build and maintain security controls within CI/CD pipelines.
• Manage application security tooling across SAST, SCA, secrets scanning, and code security.
• Identify and remediate security risks across apps, APIs, and cloud environments.
• Automate security processes using common scripting languages.
• Support vulnerability management and collaborate with engineering teams.

Skills

DevSecOps

Application Security

Cloud Security

Security Automation

Scripting (Python)

Tools

GitHub Actions

Azure DevOps

GitLab CI

Jenkins

Job description

We are working with a leading organization looking to add a hands‑on DevSecOps Engineer to its cybersecurity team.

This person will work closely with development, cloud, infrastructure, and security teams to build security directly into applications, CI/CD pipelines, and cloud environments.

What You'll Be Doing:

• Build and maintain security controls within CI/CD pipelines, including automated testing and security gates.
• Manage application security tooling across SAST, SCA, secrets scanning, dependency scanning, and code security.
• Identify and remediate security risks across applications, APIs, cloud environments, containers, Kubernetes, and infrastructure.
• Automate security processes using Python, PowerShell, Bash, APIs, and integrations.
• Support vulnerability management across tools such as Snyk, Wiz, Sysdig, Tenable, and GitHub.
• Partner directly with engineering teams on threat modeling, secure code reviews, and security design reviews.
• Help improve security reporting, dashboards, developer self-service, and automated evidence collection.

What We're Looking For:

• 7+ years of overall IT/engineering experience, with 5+ years across DevSecOps, Application Security, Cloud Security, Security Engineering, or Software Engineering.
• Strong experience securing CI/CD environments such as GitHub Actions, Azure DevOps, GitLab CI, or Jenkins.
• Hands‑on experience with AWS and/or Azure.
• Experience with SAST, SCA, secrets scanning, container security, and IaC security.
• Strong scripting/automation experience with Python, PowerShell, Bash, or similar.
• Experience with Terraform, CloudFormation, Kubernetes, APIs, and cloud-native environments is a plus.
• Strong communication skills and the ability to work directly with developers and engineering teams.

This is a hands‑on engineering role for someone who can build and automate security solutions, not just review findings and make recommendations.