Hybrid DevSecOps Engineer: Secure Cloud & CI/CD Innovator

Hospital for Special Surgery; New York, Northern (NY, KY); Hybrid; USD 140,000 - 175,000; Full time

Job summary

Hospital for Special Surgery is seeking a DevSecOps Engineer to embed secure-by-design principles into our apps, pipelines, and infrastructure in a hybrid New York setup. You will lead security testing, vulnerability management, and automated remediation across CI/CD, cloud, and container environments.

The role requires deep expertise in DevSecOps, cloud security, SAST/SCA, and IaC scanning, with strong collaboration across engineering and security teams.

Qualifications

• Seven+ years of IT experience with five+ years in DevSecOps or related security engineering role.
• Experience with secure SDLC practices, cloud security concepts, CI/CD security, and vulnerability management.
• Familiarity with SAST, SCA, secrets scanning, dependency analysis, container scanning, and IaC scanning.

Responsibilities

• Partner with development, data, infrastructure, cloud, and cybersecurity teams to embed secure-by-design principles into apps, services, pipelines, platforms, and infra.
• Design, implement, and maintain security controls in CI/CD pipelines, including automated tests, gates, and risk-based workflows.
• Manage and support SAST, SCA, secrets detection, dependency review, and code scanning using tools like Snyk, Wiz, and GitHub.
• Review designs, data flows, APIs, and cloud workloads to identify risks and propose remediation or compensating controls.
• Support threat modeling, secure code review, and security design reviews across the lifecycle.
• Remediate vulnerabilities in apps, cloud, containers, and infra using platforms like Snyk, Wiz, Sysdig, Tenable, GitHub.

Skills

DevSecOps

CI/CD security

Cloud security

SAST

SCA

Secrets scanning

Infrastructure as Code

Python

PowerShell

Bash/Unix

JavaScript

Education

Bachelor’s degree in CS/IT/cybersecurity or related field

Tools

Snyk

Wiz

Sysdig

Tenable

GitHub Advanced Security

GitHub Dependabot

Job description

Hospital for Special Surgery is seeking a DevSecOps Engineer to embed secure-by-design principles into our apps, pipelines, and infrastructure in a hybrid New York setup. You will lead security testing, vulnerability management, and automated remediation across CI/CD, cloud, and container environments.

The role requires deep expertise in DevSecOps, cloud security, SAST/SCA, and IaC scanning, with strong collaboration across engineering and security teams.