DevSecOps Engineer: Build Secure CI/CD & Cloud Automation

Socket.dev; Columbus (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

Gifthealth is hiring a DevSecOps Engineer to integrate security into development and delivery workflows. You will partner with Software, Platform, DevOps, and Security teams to embed controls in CI/CD, IaC, containers, and application delivery, enabling fast releases without compromising security.

The role emphasizes automated testing, guardrails, and risk-based remediation across cloud-native components, with ongoing migration from Heroku to Render and a focus on secure, scalable software

Qualifications

• Experience securing modern CI/CD pipelines and software delivery practices.
• Demonstrated ability to implement security controls in IaC, containers, and cloud environments.
• Knowledge of OWASP Top 10 and common application vulnerability classes.

Responsibilities

• Integrate security into the software development lifecycle across teams.
• Design automated security testing in CI/CD pipelines (SAST, SCA, secrets scanning).
• Secure API authentication and authorization patterns and perform threat modeling.
• Review infrastructure-as-code and cloud configurations for security risks.
• Build reusable security patterns and guardrails for deployments.

Skills

CI/CD security

Secure coding

Terraform

Kubernetes

SAST

SCA

Secrets management

Cloud security

Python/Go/JavaScript

Rails security tooling

Tools

GitHub Advanced Security

CodeQL

Dependabot

Job description

Gifthealth is hiring a DevSecOps Engineer to integrate security into development and delivery workflows. You will partner with Software, Platform, DevOps, and Security teams to embed controls in CI/CD, IaC, containers, and application delivery, enabling fast releases without compromising security.

The role emphasizes automated testing, guardrails, and risk-based remediation across cloud-native components, with ongoing migration from Heroku to Render and a focus on secure, scalable software