Lead DevSecOps Engineer: Secure Cloud-Native Pipelines

Jobtailor; Town of Florida (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Jobtailor in New York seeks a senior DevSecOps lead to guide security across engineering teams, embedding security into cloud-native projects and AI-driven initiatives. You will design secure AWS architectures for high-availability SaaS products, lead threat modelling, risk assessments and security reviews, and promote a security-first engineering culture across the organization.

Collaborate with product teams and AWS security accounts to implement checks, track findings and improve developer

Qualifications

• Strong hands-on experience with AWS and cloud security.

Responsibilities

• Act as a technical leader driving DevSecOps across engineering teams.
• Embed, maintain and optimise security into CI/CD pipelines and product development workflows for cloud-native and AI-driven projects.
• Design and evolve secure AWS architectures supporting high-availability SaaS products.
• Partner with product and engineering teams to shift security left and improve developer experience.
• Partner with AWS security and account teams to implement and track security checks and best practices (e.g. ESSR findings, AWS Security Hub, AWS Guard Duty etc.).
• Lead threat modelling, risk assessments and security reviews for new and existing services.
• Drive automation and AI across infrastructure, security controls and compliance processes.
• Build and promote a strong security-first engineering culture.

Skills

DevSecOps

AWS

CI/CD security

Threat modelling

Terraform

CloudFormation

SAST/DAST

Least privilege

Cross-functional

Security culture

Tools

Terraform

CloudFormation

Job description

Jobtailor in New York seeks a senior DevSecOps lead to guide security across engineering teams, embedding security into cloud-native projects and AI-driven initiatives. You will design secure AWS architectures for high-availability SaaS products, lead threat modelling, risk assessments and security reviews, and promote a security-first engineering culture across the organization.

Collaborate with product teams and AWS security accounts to implement checks, track findings and improve developer