Remote DevSecOps Engineer: Secure CI/CD & Automation

BairesDev; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

USD compensation

Home setup

Flexible hours

Parental leave

Holidays

Global collaboration

Mentorship & growth

Job summary

BairesDev is seeking a Software Engineer specialized in DevSecOps to embed security into the software development lifecycle and help teams ship secure code through modern CI/CD practices.

You will automate security controls, perform SAST/DAST, scan dependencies and containers, and enforce policy-as-code across environments while collaborating with global engineering teams to improve the overall security posture.

Qualifications

• 4+ years of experience in DevSecOps, Application Security, or Software Engineering.
• Proven expertise in integrating security automation into CI/CD pipelines.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Proficiency in container scanning and implementing policy-as-code enforcement.
• Advanced proficiency in English.

Responsibilities

• Design and implement automated security scanning within CI/CD pipelines to detect vulnerabilities early.
• Perform regular SAST and DAST analysis to identify and remediate security flaws in application code and running services.
• Automate dependency and container scanning to manage third-party risks and ensure secure base images.
• Develop and enforce policy-as-code to maintain consistent security standards across all environments.
• Collaborate with engineering teams to provide guidance on security best practices and remediation strategies.
• Monitor and improve the overall security posture of the delivery pipeline through continuous automation.

Skills

DevSecOps

CI/CD security

SAST

DAST

Policy as code

Container security

Security automation

English proficiency

Job description

BairesDev is seeking a Software Engineer specialized in DevSecOps to embed security into the software development lifecycle and help teams ship secure code through modern CI/CD practices.

You will automate security controls, perform SAST/DAST, scan dependencies and containers, and enforce policy-as-code across environments while collaborating with global engineering teams to improve the overall security posture.