Lead DevSecOps Engineer: Secure SDLC & Cloud Security

AEG; Los Angeles (CA); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid holidays

Vacation and sick time

Life insurance

Job summary

AEG is seeking a Lead DevSecOps Engineer to oversee SSDLC and secure software development across North America and Europe. You will partner with Engineering, DevOps, and GRC teams to establish secure standards, strengthen cloud and app security, and advance security automation.

The role requires deep experience in CI/CD security, SAST/DAST/SCA tooling, threat modeling, and secure coding practices, with a strong track record in cross-functional leadership.

Qualifications

• BA/BS in Computer Science, Cybersecurity, Engineering, Information Systems, or related field.
• 5+ years in DevSecOps, Application Security, Security Engineering, or related roles.
• Proven experience integrating security across the SDLC, incl. CI/CD pipelines and modern delivery platforms.
• Hands-on with SAST, DAST, SCA, and container security solutions.
• Experience performing threat modeling, vulnerability management, and remediation tracking.
• Monitoring, alerting, and security controls across cloud, app, and infra environments.

Responsibilities

• Lead SSDLC program development and enterprise-wide secure development standards.
• Drive secure-by-design practices across software delivery lifecycles and pipelines.
• Oversee architecture and governance of SAST/DAST tooling and monitoring.
• Perform risk assessments, threat modeling, and compliance alignment with frameworks.
• Conduct secure code reviews and remediation tracking across teams.
• Collaborate with global Engineering, DevOps, Platform, and GRC teams on security initiatives.
• Support audits and incident response related to SDLC and app security controls.

Skills

DevSecOps

Application Security

Security Engineering

Threat Modeling

Vulnerability Management

SSDLC

CI/CD Pipelines

SAST

DAST

SCA

Container Security

OWASP Top 10

NIST SSDF

Cloud Security

GitHub Actions

Jenkins

CircleCI

Azure DevOps

Programming: JavaScript

Programming: Python

Education

BA/BS Degree in Computer Science or related field

Master's degree or advanced certifications preferred

Tools

GitHub Actions

Jenkins

CircleCI

Azure DevOps

SAST tools

DAST tools

SCA tools

Container security tooling

Job description

AEG is seeking a Lead DevSecOps Engineer to oversee SSDLC and secure software development across North America and Europe. You will partner with Engineering, DevOps, and GRC teams to establish secure standards, strengthen cloud and app security, and advance security automation.

The role requires deep experience in CI/CD security, SAST/DAST/SCA tooling, threat modeling, and secure coding practices, with a strong track record in cross-functional leadership.