Lead DevSecOps Engineer - SSDLC & CI/CD Security

Jobs in JS; Los Angeles (CA); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

401k Plan with match

Medical, dental, vision

Paid time off

Job summary

AEG is seeking a Lead DevSecOps Engineer to bolster its SSDLC program and secure software delivery across North America and Europe. You will partner with Engineering, DevOps, Platform Engineering, and GRC to build secure development standards, automate security controls, and advance security posture.

Responsibilities include driving secure CI/CD pipelines, implementing SAST/DAST tooling, and leading cross-functional security initiatives while aligning with global teams across time zones.

Qualifications

• Bachelor's degree in a related field; advanced degree/certs preferred.
• 5+ years in DevSecOps, App Security, or similar roles.
• Experience embedding security across SSDLC and CI/CD pipelines.
• Hands-on with SAST/DAST, SCA, and container security tooling.
• Ability to model threats and manage vulnerabilities end-to-end.

Responsibilities

• Lead SSDLC enablement and secure development standards across teams.
• Own secure CI/CD architecture, pipelines, and policy enforcement.
• Oversee security tooling, monitoring, alerts, and visibility.
• Guide risk assessments, threat modeling, and compliance mapping (NIST/ISO SOC2).
• Perform secure code reviews and remediation tracking with teams.
• Partner with Engineering, DevOps, Platform, and GRC to drive initiatives.

Skills

SSDLC

CI/CD security

Threat modeling

Vulnerability management

Security automation

SAST/DAST tooling

Cloud security

Security governance

OSS monitoring

Education

BA/BS in CS/Cybersecurity/Engineering

Advanced degree or certs

Tools

GitHub Actions

Jenkins

Azure DevOps

SAST tools

DAST tools

Container security tools

Job description

AEG is seeking a Lead DevSecOps Engineer to bolster its SSDLC program and secure software delivery across North America and Europe. You will partner with Engineering, DevOps, Platform Engineering, and GRC to build secure development standards, automate security controls, and advance security posture.

Responsibilities include driving secure CI/CD pipelines, implementing SAST/DAST tooling, and leading cross-functional security initiatives while aligning with global teams across time zones.