DevSecOps Engineer: Secure CI/CD, Cloud & Kubernetes

Blue Yonder; Boston (MA); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401K with Matching

Flexible Time Off

Corporate Fitness Program

Voluntary benefits

Job summary

Blue Yonder is seeking a DevSecOps Engineer to embed security into our CI/CD pipelines and automate security testing. The role focuses on securing cloud infrastructure, containers, and Kubernetes environments, with emphasis on SAST/DAST/SCA and IaC security scanning.

The candidate will work with DevOps and security teams to promote secure coding practices and remediating vulnerabilities, while ensuring compliance with security standards and governance requirements.

Qualifications

• 3-6 years of experience in DevOps, DevSecOps, or security engineering.
• Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, or similar).
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Experience with container technologies (Docker, Kubernetes).
• Understanding of SSDLC practices.
• Experience integrating SAST/DAST/SCA and container scanning tools.

Responsibilities

• Design and implement security controls within CI/CD pipelines to ensure secure software delivery.
• Integrate automated security testing tools such as SAST, DAST, SCA, and container scanning.
• Embed security checks into build and deployment processes to identify vulnerabilities early in the SDLC.

Skills

DevSecOps

CI/CD automation

Cloud security

Container and Kubernetes security

Vulnerability management

Infrastructure as Code

Security tooling integration

Job description

Blue Yonder is seeking a DevSecOps Engineer to embed security into our CI/CD pipelines and automate security testing. The role focuses on securing cloud infrastructure, containers, and Kubernetes environments, with emphasis on SAST/DAST/SCA and IaC security scanning.

The candidate will work with DevOps and security teams to promote secure coding practices and remediating vulnerabilities, while ensuring compliance with security standards and governance requirements.