DevSecOps Security Engineer: Secure CI/CD & Cloud

PSEG; Town of Oyster Bay (NY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

PSEG is seeking an experienced DevSecOps Engineer to build, integrate, and operate security within our DevOps and CI/CD pipelines. You will embed security controls across the software development lifecycle, secure cloud infrastructure, and ensure applications and APIs meet enterprise security and compliance requirements.

Working with development, infrastructure, and cybersecurity teams, you will implement automated security testing, vulnerability management, and compliance validation across

Qualifications

• BS degree or higher with 4+ years in DevOps/DevSecOps.
• Alternatively, 8+ years hands-on DevSecOps tooling and processes.
• CI/CD pipelines secured with integrated security controls.
• Experience with SAST/DAST and API security.

Responsibilities

• Integrate security controls into CI/CD pipelines for secure delivery.
• Develop and maintain DevSecOps pipelines with security scans and compliance.
• Implement automated security testing: SAST, SCA, container image scanning, API tests.
• Integrate code security capabilities like secret detection and dependency monitoring.
• Maintain API security controls to monitor enterprise APIs.
• Support container security practices, image scanning and artifact repos.
• Remediate vulnerabilities with automated tooling and pen tests.
• Apply IaC security validation for cloud-native architectures.
• Support CSPM initiatives to keep cloud environments compliant.
• Develop automation scripts to support DevSecOps.
• Collaborate with teams to maintain secure deployment pipelines.
• Provide guidance on secure coding and DevSecOps principles.

Skills

CI/CD security

Cross-functional collaboration

Team building

Strong communication

Education

BS degree or higher in related field

8+ years hands-on DevSecOps experience

Tools

Jenkins

GitHub Actions

GitLab CI/CD

Azure DevOps

SAST tools

DAST tools

Nexus

JFrog Artifactory

Docker

Kubernetes

Terraform

CloudFormation

Python

Bash

Job description

PSEG is seeking an experienced DevSecOps Engineer to build, integrate, and operate security within our DevOps and CI/CD pipelines. You will embed security controls across the software development lifecycle, secure cloud infrastructure, and ensure applications and APIs meet enterprise security and compliance requirements.

Working with development, infrastructure, and cybersecurity teams, you will implement automated security testing, vulnerability management, and compliance validation across