DevSecOps Security Engineer

Synkriya Tech (previously Sincera Consulting); United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Synkriya Tech is seeking a DevSecOps Security Engineer to support a mission-critical automation platform in the air traffic management domain. The role focuses on integrating automated security controls into CI/CD pipelines, strengthening Kubernetes security, and ensuring secure software delivery.

Responsibilities include SBOM generation, security gates, secrets management, and policy-as-code, along with vulnerability triage and incident response. 4+ years of relevant experience are required.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• At least 4+ years of hands-on security engineering in DevSecOps.
• Experience with Kubernetes, Docker, CI/CD, and automated security scanning.
• Familiarity with SAST/DAST/SCA, SBOM, and secrets management.

Responsibilities

• Integrate SAST, DAST, SCA, container scanning, and IaC security into CI/CD pipelines.
• Implement security gates, artifact signing, provenance verification, and SBOM generation.
• Harden Kubernetes and container environments with RBAC, network policies, and admission controls.
• Perform vulnerability assessment, CVE triage, remediation, and security automation.
• Implement secrets management and policy-as-code; apply cloud security controls.
• Support security evidence generation, incident response, and root-cause analysis.

Skills

Kubernetes

Docker

CI/CD

Security scanning

Python

Bash

Go

HashiCorp Vault

NIST 800-53

AWS/Azure security

Education

Bachelor's degree or equivalent

Tools

Trivy

Grype

Nessus

Qualys

GitLab CI

GitHub Actions

Jenkins

ArgoCD

Flux

Terraform security scanning

Sigstore/cosign

Job description

We are looking for a skilled DevSecOps Security Engineer to support a mission-critical automation platform in the air traffic management domain. This role focuses on integrating automated security controls into CI/CD pipelines, strengthening Kubernetes security, and ensuring secure software delivery.

Key Responsibilities:

• Integrate SAST, DAST, SCA, container scanning, and IaC security scanning into CI/CD pipelines.
• Implement security gates, artifact signing, provenance verification, and SBOM generation.
• Secure Kubernetes and container environments through RBAC, network policies, admission controls, and hardening.
• Perform vulnerability assessment, CVE triage, remediation, and security automation.
• Implement secrets management, policy-as-code, and cloud security controls.
• Support security evidence generation, incident response, and root cause analysis.

Required Skills:

• 4+ years of relevant experience and a bachelor's degree or equivalent combination of education and experience.
• Hands-on experience with Kubernetes, Docker, CI/CD, and automated security scanning.
• Tools: Trivy, Grype, Nessus, Qualys, GitLab CI, GitHub Actions, or Jenkins.
• Scripting with Python, Bash, or Go.
• Experience with HashiCorp Vault or equivalent secrets management.
• Knowledge of NIST 800-53 and AWS/Azure security.

Preferred Qualifications:

• Security+ CE, CySA+, CKA, or CKS certifications.
• OPA/Rego, Kyverno, Terraform security scanning, and GitOps tools such as ArgoCD or Flux.
• Knowledge of software supply chain security, SLSA, Sigstore/cosign, and service mesh security.
• Experience in aviation, FAA, or other safety-critical environments.

Important Eligibility Requirements:

• U.S. citizenship is required.
• Candidates must be able to obtain and maintain a favorable Public Trust investigation.
• Must meet FAA access requirements, including continuous U.S. residency for at least 3 of the previous 5 years.

#Hiring #DevSecOps #CyberSecurity #Kubernetes #CloudSecurity #AWS #Azure #CICD #SecurityEngineering #RemoteJobs #ITJobs