Remote DevSecOps Engineer — Linux Security & CI/CD

SRG4; Troy (MI); On-site; USD 58,000 - 96,000; Full time

Job summary

Staffing Resource Group, Inc. is seeking a DevSecOps Engineer focused on application security for Linux. The role emphasizes threat modeling, secure CI/CD pipelines, and secure handling of build artifacts in a Linux environment.

Responsibilities include threat identification, secure development guidance, and implementing SAST/SCA processes using GitLab CI/CD and related tooling. Applicants should have 3+ years of DevSecOps experience and a BS degree in engineering or a related field.

Qualifications

• BS Degree in Engineering or related field.
• 3+ years of relevant experience in DevSecOps.
• Strong Linux expertise and security knowledge.
• Experience with GitLab CI/CD pipelines.
• Experience with SAST/SCA tools (Coverity, Black Duck) and interpreting scan results.

Responsibilities

• Analyze architectures, deployment topologies, and trust boundaries to identify threats and define appropriate security controls across the development lifecycle.
• Develop threat models to identify vulnerabilities and drive the selection of security controls in code, pipelines, and runtime environments.
• Guide secure development through code reviews and risk-based recommendations.
• Design, implement, and maintain CI/CD pipelines that enforce and validate security controls for C/C++ applications targeting Linux hosts.
• Build C/C++ applications using Linux toolchains and resolve compilation issues.

Skills

Linux security

Threat modeling

Secure software development

Analytical thinking

Attack surface analysis

Education

BS Degree in Engineering or related field

Tools

GitLab CI/CD

GCC toolchain

Coverity

Black Duck

SAST/SCA tooling

Job description

Staffing Resource Group, Inc. is seeking a DevSecOps Engineer focused on application security for Linux. The role emphasizes threat modeling, secure CI/CD pipelines, and secure handling of build artifacts in a Linux environment.

Responsibilities include threat identification, secure development guidance, and implementing SAST/SCA processes using GitLab CI/CD and related tooling. Applicants should have 3+ years of DevSecOps experience and a BS degree in engineering or a related field.