Remote DevSecOps Engineer — Secure Apps & DevOps

VDart Inc; United States; Remote; USD 140,000 - 170,000; Full time

Job summary

VDart Inc. is seeking a Senior DevSecOps Engineer to drive application security and secure DevOps practices across environments. This remote role focuses on rapid, reliable software delivery while maintaining a strong security posture.

Your work will include deploying SAST/DAST/IAST, interpreting results, and collaborating with teams to set security metrics and automate security gains across pipelines.

Qualifications

• Proficient experience in Python, JavaScript, or Java.
• Familiarity with Nessus, Burp, and web application firewalls.
• Experience with SAST/DAST/IAST methodologies and tools.
• Experience with automation tools such as Terraform, Puppet, Chef, Salt, Ansible, or CloudFormation.
• Experience conducting a detailed threat model exercise.
• Experience with CI/CD pipelines and security integration.
• Experience with cloud-based infrastructure, preferably AWS.

Responsibilities

• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize remediation of high-risk vulnerabilities.
• Perform threat modeling to identify threat vectors in the tech stack.
• Collaborate with stakeholders to establish metrics showing security proficiency across teams.
• Steer development of tools to improve security via automation and other means.
• Ensure processes related to key systems are documented, maintained, and archived.

Skills

Python

JavaScript

Java

Threat modeling

CI/CD security

Cloud security

Tools

Nessus

Burp Suite

Web Application Firewall

SAST/DAST/IAST

Job description

VDart Inc. is seeking a Senior DevSecOps Engineer to drive application security and secure DevOps practices across environments. This remote role focuses on rapid, reliable software delivery while maintaining a strong security posture.

Your work will include deploying SAST/DAST/IAST, interpreting results, and collaborating with teams to set security metrics and automate security gains across pipelines.