DevSecOps Engineer: Secure CI/CD & Cloud

The Elevance Health Companies, Inc.

Indianapolis (IN)

Hybrid

USD 140,000 - 180,000

Full time

6 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Elevance Health seeks a DevSecOps Engineer - Information Security to design and implement enterprise security controls across CI/CD pipelines, cloud platforms, and AI-enabled development environments. You will work with application engineering, cloud, and platform teams to embed automated security and scalable controls that balance risk reduction with developer velocity.

The role emphasizes secure-by-design practices, threat modeling, and integration of SAST/DAST/SCA into pipelines, with focus

Qualifications

Requires BS/BA in information Technology or related field and a minimum of 8 years experience in systems administration and security aspects of information systems, access management and network security technologies.

Responsibilities

Define and implement secure SDLC practices with automated testing, threat modeling and secure coding standards.
Drive vulnerability management strategy and integrate into developer workflows.
Lead risk assessment methodologies to fit business, regulatory, and technical environments.
Lead the development of requirements, architecture, and design of security products and services.
Provide architectural support for information and network security technologies.
Act as a technical advisor and escalation point for complex security challenges.
Develop incident response plans and strategies.
Lead the design and implementation of DevSecOps solutions in CI/CD pipelines (GitHub, GitLab, Jenkins).
Integrate and tune AppSec tools (SAST, DAST, SCA, container scanning) for scalable pipelines.
Own and optimize CNAPP platforms to improve cloud security posture.
Collaborate with engineering to reduce backlog and MTTR.
Define KPIs and reporting for security posture and risk reduction.
Establish guardrails for AI-generated code security and mitigate risks.
Embed security controls into AI-enabled apps and APIs to address emerging risks.