DevSecOps Lead

Jobtailor; Town of Florida (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Jobtailor in New York seeks a senior DevSecOps lead to guide security across engineering teams, embedding security into cloud-native projects and AI-driven initiatives. You will design secure AWS architectures for high-availability SaaS products, lead threat modelling, risk assessments and security reviews, and promote a security-first engineering culture across the organization.

Collaborate with product teams and AWS security accounts to implement checks, track findings and improve developer

Qualifications

• Strong hands-on experience with AWS and cloud security.

Responsibilities

• Act as a technical leader driving DevSecOps across engineering teams.
• Embed, maintain and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects.
• Design and evolve secure AWS architectures supporting high-availability SaaS products.
• Partner with product and engineering teams to shift security left and improve developer experience.
• Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty etc.).
• Lead threat modelling, risk assessments and security reviews for new and existing services.
• Drive automation and AI across infrastructure, security controls and compliance processes.
• Build and promote a strong security-first engineering culture.

Skills

DevSecOps

AWS

CI/CD security

Threat modelling

Terraform

CloudFormation

SAST/DAST

Least privilege

Cross-functional

Security culture

Tools

Terraform

CloudFormation

Job description

Responsibilities

• Act as a technical leader driving DevSecOps practices across engineering teams
• Embed, maintain and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects
• Design and evolve secure AWS architectures supporting high-availability SaaS products
• Partner with product and engineering teams to shift security left and improve developer experience
• Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty etc.)
• Lead threat modelling, risk assessments and security reviews for new and existing services
• Drive automation and AI across infrastructure, security controls and compliance processes
• Build and promote a strong security-first engineering culture

Requirements

• Strong hands‑on experience with AWS (IAM, VPC, Security Groups, EKS/ECS, Lambda, CloudWatch, etc.)
• Experience securing cloud-native and SaaS platforms (multi‑tenant environments is a plus)
• Deep understanding of DevSecOps practices and integrating security into CI/CD pipelines
• Experience with tools such as Terraform, CloudFormation or other IaC frameworks
• Knowledge of application security (SAST, DAST, dependency scanning, SBOMs)
• Strong understanding of identity, access management and least‑privilege principles
• Experience working with cross‑functional teams and influencing engineering practices
• Excellent communication skills in English