DevSecOps Engineer: Secure CI/CD & Cloud Automation

Initvalue; Fremont (CA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Initvalue is seeking an experienced DevSecOps Engineer to embed security into the software delivery lifecycle across CI/CD, cloud, and operations teams. The role emphasizes securing pipelines, IaC, containers, and cloud infrastructure while automating security controls and vulnerability management.

You will collaborate with development, DevOps, and security teams to raise the organization’s security posture without hindering speed or reliability, mentoring junior engineers in secure engineering

Qualifications

• 5+ years of experience in DevSecOps, DevOps, Cloud Security, Cybersecurity, or a related field.
• Strong experience with CI/CD platforms and DevOps practices.
• Hands‑on experience with AWS, Azure, or GCP.
• Strong knowledge of Docker and Kubernetes.
• Experience with SAST, DAST, SCA, container, and IaC security tools.
• Strong understanding of Linux, networking, IAM, authentication, and authorization.
• Experience with Terraform or other Infrastructure-as-Code tools.
• Proficiency in Git and modern CI/CD platforms.
• Knowledge of cloud security and vulnerability management.
• Scripting experience with Python, Bash, PowerShell, or similar languages.
• Understanding of secure software development and security engineering principles.
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Integrate security practices and automated security testing into CI/CD pipelines.
• Design and maintain secure CI/CD workflows across development and production environments.
• Implement SAST, DAST, SCA, container, and Infrastructure-as-Code security scanning.
• Identify, assess, prioritize, and remediate vulnerabilities.
• Secure cloud environments across AWS, Azure, or GCP.
• Implement security controls for Docker and Kubernetes environments.
• Secure Infrastructure as Code using Terraform or similar technologies.
• Manage secrets, credentials, certificates, and access controls.
• Automate security and compliance checks throughout the software delivery lifecycle.
• Monitor infrastructure, applications, and pipelines for security risks.
• Collaborate with developers, DevOps engineers, cloud engineers, and security teams.
• Investigate security issues and support incident response and remediation.
• Establish secure development and deployment standards.
• Improve security automation, monitoring, and vulnerability management processes.
• Contribute to security architecture and technical design decisions.
• Mentor junior engineers and promote secure engineering practices.

Skills

DevSecOps

DevOps

Cloud Security

Cybersecurity

CI/CD

Docker

Kubernetes

Linux

Networking

IAM

Terraform

Python

PowerShell

Tools

Terraform

SAST

DAST

SCA

IaC tools

Job description

Initvalue is seeking an experienced DevSecOps Engineer to embed security into the software delivery lifecycle across CI/CD, cloud, and operations teams. The role emphasizes securing pipelines, IaC, containers, and cloud infrastructure while automating security controls and vulnerability management.

You will collaborate with development, DevOps, and security teams to raise the organization’s security posture without hindering speed or reliability, mentoring junior engineers in secure engineering