Lead DevSecOps Engineer: Secure SDLC & CI/CD Mastery

Global Partnerships; Los Angeles (CA); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Paid holidays

Vacation and sick time

Company paid basic life insurance

Voluntary life insurance

Parental leave

401k Plan (3% match)

Flexible spending and health savings

Wellness offerings

Job summary

AEG is seeking a Lead DevSecOps Engineer to join its global Information Security organization and drive SSDLC programs. You will lead secure software practices, automation, and the integration of security across the development lifecycle.

The role partners with Engineering, DevOps, Platform, Infrastructure, and GRC teams to establish secure standards and improve security posture across North America and Europe, with cross-time-zone collaboration.

Qualifications

• BA/BS in Computer Science, Cybersecurity, Engineering, Information Systems, or related field.
• 5+ years in DevSecOps, Application Security, Security Engineering, or related roles.
• Experience integrating security across the SDLC, including CI/CD pipelines.
• Hands-on with SAST, DAST, SCA, and container security tools.
• Experience threat modeling, risk assessments, vulnerability management, remediation tracking.
• Monitoring, alerting, and security controls across cloud, app, and infra environments.
• Knowledge of SSDLC practices and secure coding principles.
• Familiarity with Laravel and enterprise web frameworks.

Responsibilities

• Lead SSDLC enablement and enterprise-wide secure development standards.
• Drive security-by-design, automate controls across the SDLC.
• Architect and mature enterprise CI/CD security capabilities.
• Define secure build, deployment, and dependency management.
• Lead architecture for security tooling and monitoring (SAST/DAST).
• Oversee risk assessments, threat modeling, and SDLC compliance.
• Conduct secure code reviews and remediation tracking.
• Act as security advisor to Engineering, DevOps, Platform, and GRC teams.
• Lead audits, incident response, and cross-functional security initiatives.

Skills

DevSecOps

Application Security

Security Engineering

SSDLC

Threat Modeling

Vulnerability Management

CI/CD Security

Security Testing

Education

BA/BS Degree

Advanced Degree Preferred

Tools

SAST

DAST

SCA

Container Security

Job description

AEG is seeking a Lead DevSecOps Engineer to join its global Information Security organization and drive SSDLC programs. You will lead secure software practices, automation, and the integration of security across the development lifecycle.

The role partners with Engineering, DevOps, Platform, Infrastructure, and GRC teams to establish secure standards and improve security posture across North America and Europe, with cross-time-zone collaboration.