DevSecOps Security Engineer: Secure CI/CD & Kubernetes

Synkriya Tech (previously Sincera Consulting); United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Synkriya Tech is seeking a DevSecOps Security Engineer to support a mission-critical automation platform in the air traffic management domain. The role focuses on integrating automated security controls into CI/CD pipelines, strengthening Kubernetes security, and ensuring secure software delivery.

Responsibilities include SBOM generation, security gates, secrets management, and policy-as-code, along with vulnerability triage and incident response. 4+ years of relevant experience are required.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• At least 4+ years of hands-on security engineering in DevSecOps.
• Experience with Kubernetes, Docker, CI/CD, and automated security scanning.
• Familiarity with SAST/DAST/SCA, SBOM, and secrets management.

Responsibilities

• Integrate SAST, DAST, SCA, container scanning, and IaC security into CI/CD pipelines.
• Implement security gates, artifact signing, provenance verification, and SBOM generation.
• Harden Kubernetes and container environments with RBAC, network policies, and admission controls.
• Perform vulnerability assessment, CVE triage, remediation, and security automation.
• Implement secrets management and policy-as-code; apply cloud security controls.
• Support security evidence generation, incident response, and root-cause analysis.

Skills

Kubernetes

Docker

CI/CD

Security scanning

Python

Bash

Go

HashiCorp Vault

NIST 800-53

AWS/Azure security

Education

Bachelor's degree or equivalent

Tools

Trivy

Grype

Nessus

Qualys

GitLab CI

GitHub Actions

Jenkins

ArgoCD

Flux

Terraform security scanning

Sigstore/cosign

Job description

Synkriya Tech is seeking a DevSecOps Security Engineer to support a mission-critical automation platform in the air traffic management domain. The role focuses on integrating automated security controls into CI/CD pipelines, strengthening Kubernetes security, and ensuring secure software delivery.

Responsibilities include SBOM generation, security gates, secrets management, and policy-as-code, along with vulnerability triage and incident response. 4+ years of relevant experience are required.