DevSecOps Engineer - Cloud Security & CI/CD Automation

OpenTalent; Naperville (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

OpenTalent is seeking a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage SAST/DAST/SCA tooling and secure multi-cloud patterns, accelerating software delivery while reducing security overhead across teams.

You will collaborate with architecture and engineering to implement guardrails, automate remediation, and fine-tune tools for reduced false positives, ensuring secure release

Qualifications

• 3–5+ years in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience with AWS and Google Cloud Platform (GCP).
• Deep experience with AWS core security infra (IAM, KMS, Secrets Manager, VPC, EKS/ECS).
• Strong proficiency with Terraform or AWS CDK for guardrails as code.
• Hands-on in integrating SAST/DAST/SCA into CI/CD pipelines (GitHub Actions, CodeBuild, Jenkins).
• Experience establishing identity flows and Workload/Workforce Federation across AWS and GCP.
• Hands-on with container security, image scanning (ECR, Trivy).
• Proficiency in CloudWatch, SIEM, and security findings triage.

Responsibilities

• Implement, configure, and maintain automated security scanning across development pipelines.
• Triage findings and automate remediation workflows to streamline vulnerability management.
• Establish secure multi-cloud guardrails, including AWS-to-GCP federation, KMS management, and API gateway access controls.
• Enforce IaC security automation (Terraform, Checkov, Trivy) to embed policy-as-code.
• Serve as SME for cloud security tooling, CI/CD automation, and multi-cloud access patterns.
• Tune security tools to reduce false positives and noise for delivery teams.
• Act as secondary escalation for security incidents and contribute to post-mortems.
• Coordinate technical resolution during security events and share learnings.

Skills

DevSecOps

Cloud security

AWS

GCP

Terraform

CI/CD

SAST/DAST/SCA

ECR/Container security

Security tooling

IAM/KMS

Tools

GitHub Actions

AWS CodeBuild

Jenkins

Trivy

Checkov

Terraform

AWS

ECR

Job description

OpenTalent is seeking a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines. You will manage SAST/DAST/SCA tooling and secure multi-cloud patterns, accelerating software delivery while reducing security overhead across teams.

You will collaborate with architecture and engineering to implement guardrails, automate remediation, and fine-tune tools for reduced false positives, ensuring secure release