DevSecOps Engineer - Secure CI/CD for Data Science

University of Chicago; Chicago (IL); On-site; USD 80,000 - 120,000; Full time

Job summary

University of Chicago is seeking a DevSecOps Engineer to streamline secure software development, automate security checks, and improve incident response for on‑prem and cloud environments. You will collaborate with CTDS teams to embed security into the development lifecycle and protect data science platforms and AI/ML research workstreams.

The role requires hands-on experience with SAST/SCA/IAST/DAST, container security, and CI/CD pipelines, plus strong scripting and communication skills to

Qualifications

• Minimum 2–5 years in DevSecOps or related security engineering roles.
• Experience with vulnerability scanning tools and secure code reviews.

Responsibilities

• Evaluate threat, vulnerability, impact, and risk using SAST/ SCA/ IAST/ DAST and container security tools.
• Design, develop, and maintain secure infrastructure for CTDS across on‑prem and cloud environments.
• Advise DevOps teams on security issues and remediation steps with clear, actionable guidance.
• Develop DevSecOps metrics, policies, and procedures; drive security in CI/CD pipelines.
• Provide developer training on security tooling and secure coding practices.

Skills

Threat modeling

Security automation

CI/CD security

Python scripting

Cloud security

OpenStack/AWS/GCP/Azure

SAST/SCA/IAST/DAST

Palo Alto XSOAR

Education

Bachelor's degree in Computer Science/ Engineering or IT

Tools

OpenStack

AWS

GCP

Azure

SAST

SCA

DAST

IAST

Palo XSOAR

Argo

Helm

Job description

University of Chicago is seeking a DevSecOps Engineer to streamline secure software development, automate security checks, and improve incident response for on‑prem and cloud environments. You will collaborate with CTDS teams to embed security into the development lifecycle and protect data science platforms and AI/ML research workstreams.

The role requires hands-on experience with SAST/SCA/IAST/DAST, container security, and CI/CD pipelines, plus strong scripting and communication skills to