Lead DevSecOps Engineer - Cloud Security & Tooling

Allegiantair; Las Vegas (NV); On-site; USD 150,000 - 210,000; Full time

Job summary

Allegiant is seeking a DevSecOps Principal Engineer to lead the Information Security Engineering team. You will own security tooling, policies, and automation across CI/CD pipelines, cloud workloads, and IaC governance in production environments.

You will mentor two engineers, drive adoption of secure SDLC practices, and partner with DevOps, software engineering, and security governance to deliver compliant security outcomes at scale.

Qualifications

• Must have 8+ years in information security.
• Experience across application security, pipeline engineering, cloud infra, IaC governance.
• Proven production tooling adopted by development teams.
• Experience with CNAPP platforms and AI security governance.

Responsibilities

• Lead the DevSecOps team daily and during PI planning.
• Own security gates in GitHub Actions pipelines and enforce hard‑fail.
• Operate Cortex CNAPP for cloud workload protection and image scanning.
• Manage Terraform-based security across multi-account AWS environments.
• Integrate tooling outputs into SIEM and SOAR for detection and response.
• Mentor two engineers and drive skills development.
• Collaborate with Security Governance for PCI-DSS, NIST, CIS.
• Maintain runbooks and architecture documentation.

Skills

DevSecOps

Team leadership

Cloud security

SIEM/SOAR

GitHub Advanced Security

Checkov policies

Terraform IaC

AWS Security

AI security

SAFe Agile

Jira hygiene

Education

Bachelor’s Degree or equivalent

Tools

GitHub Actions

Checkov/Bridgecrew

Cortex XSOAR

Palo Alto Prisma Cloud

Terraform

Job description

Allegiant is seeking a DevSecOps Principal Engineer to lead the Information Security Engineering team. You will own security tooling, policies, and automation across CI/CD pipelines, cloud workloads, and IaC governance in production environments.

You will mentor two engineers, drive adoption of secure SDLC practices, and partner with DevOps, software engineering, and security governance to deliver compliant security outcomes at scale.