DevSecOps Engineer: Security-First CI/CD Architect

The Jupiter Group, Inc; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

The Jupiter Group, Inc is seeking a DevSecOps security engineer who embeds security into every DevOps stage, from code to deployment. You will harden Kubernetes environments, implement container security tooling, and manage secrets and PKI lifecycles to prevent security issues before they ship.

Responsibilities include enforcing security across legacy and modern systems, integrating SCA/DAST, and automating risk assessments and compliance reporting.

Qualifications

• Security integrated into every step of the DevOps lifecycle.
• Experience securing Kubernetes and containerized apps.

Responsibilities

• Define and enforce application deployment security across Kubernetes, Service Fabric, and legacy systems.
• Implement NeuVector for container runtime security and vulnerability detection.
• Manage JFrog code scanning for artifact integrity and compliance.
• Oversee PKI lifecycle management using OpenBoa for secure secrets distribution.
• Harden DevOps tooling and IaC templates for secure deployments.
• Develop mitigation strategies for vulnerabilities in containers, VMs, and supporting infra.
• Automate compliance reporting and policy enforcement (Policy as Code).
• Conduct threat modeling and risk assessments.

Skills

Kubernetes security

DevSecOps tools

CI/CD security integration

Threat modeling

Compliance automation

Secrets management

Cloud-native security

Tools

NeuVector

JFrog Code Scanning

OpenBoa

TerraKube

AWX

Snyk

OWASP ZAP

Trivy

SonarQube

Job description

The Jupiter Group, Inc is seeking a DevSecOps security engineer who embeds security into every DevOps stage, from code to deployment. You will harden Kubernetes environments, implement container security tooling, and manage secrets and PKI lifecycles to prevent security issues before they ship.

Responsibilities include enforcing security across legacy and modern systems, integrating SCA/DAST, and automating risk assessments and compliance reporting.