Industrial DevSecOps Engineer: Secure CI/CD & Cloud

Divergent

Torrance (CA)

Hybrid

USD 116,000 - 181,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Divergent in Torrance, CA is hiring a DevSecOps Engineer to embed security across the software delivery lifecycle. You will own hardened CI/CD pipelines, policy‑as‑code guardrails, reproducible cloud infrastructure, and vulnerability triage to enable fast, secure delivery.

Work with software, platform, and IT teams to reduce risk without slowing velocity. You will design and maintain secure pipelines, manage Azure/AWS infrastructure, and drive vulnerability remediation with engineering

Qualifications

U.S. Person required per ITAR (22 CFR §120.62).
5–10 years in DevOps, platform, SRE, security, or software engineering.
Bachelor's degree in CS, IS, cybersecurity, engineering, or related field.
Production experience with Azure or AWS (IAM, networking, logging).
Hands‑on with modern CI/CD systems (GitHub Actions, GitLab CI, Azure Pipelines, Jenkins).
Proficiency with infrastructure as code (Terraform, Bicep, CloudFormation, Pulumi).
Working knowledge of containers and orchestration (Docker, Kubernetes).
Scripting in Python, Go, Bash, or PowerShell for tooling.
Experience with security tooling (Black Duck, Rapid7) — SAST, SCA, secrets scanning.
Security concepts: least privilege, network segmentation, key management, OAuth/OIDC/SAML, OWASP Top 10.
Git-based workflows, code review, and branch protection.
Clear written and verbal communication.

Responsibilities

Design, build, and maintain CI/CD pipelines with automated security gates and actionable findings.
Provision and manage cloud infrastructure as code across Azure and AWS with policy checks.
Harden container and Kubernetes workloads, including base image lifecycle and least-privilege identity.
Own secrets management and pipeline authentication to remove long‑lived keys.
Triage vulnerability findings across code, dependencies, containers, and cloud posture.
Build software supply chain controls: dependencies, signatures, SBOM generation.
Instrument delivery environments with detections, dashboards, and alerts for security observability.
Automate cloud security posture assessment and remediation across accounts.
Support frameworks mapping and automated audit evidence generation.
Raise security baseline via reusable templates, golden paths, code reviews, mentoring.