Remote DevSecOps Engineer - Secure CI/CD Champion

BairesDev; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote work

Competitive USD pay

Home setup provided

Flexible hours

Parental leave & holidays

Mentorship & growth

Job summary

BairesDev is a fully remote technology services company that has built a global team of top tech talent. As a Software Engineer (DevSecOps), you will embed security into the software lifecycle and empower teams to ship secure code via modern CI/CD pipelines.

You will design automated security scans, perform SAST/DAST analyses, and enforce policy-as-code while collaborating with engineering teams to raise security standards across environments.

Qualifications

• 4+ years of experience in DevSecOps, Application Security, or Software Engineering.
• Proven expertise integrating security automation into CI/CD pipelines.
• Hands-on experience with SAST, DAST, and dependency scanning tools.

Responsibilities

• Design and implement automated security scanning within CI/CD pipelines to detect vulnerabilities early.
• Perform regular SAST and DAST analysis to identify and remediate security flaws in application code and running services.
• Automate dependency and container scanning to manage third-party risks and ensure secure base images.
• Develop and enforce policy-as-code to maintain consistent security standards across all environments.
• Collaborate with engineering teams to provide guidance on security best practices and remediation strategies.
• Monitor and improve the overall security posture of the delivery pipeline through continuous automation.

Skills

DevSecOps

CI/CD security

SAST

DAST

Dependency scanning

Policy-as-code

Security automation

English

Job description

BairesDev is a fully remote technology services company that has built a global team of top tech talent. As a Software Engineer (DevSecOps), you will embed security into the software lifecycle and empower teams to ship secure code via modern CI/CD pipelines.

You will design automated security scans, perform SAST/DAST analyses, and enforce policy-as-code while collaborating with engineering teams to raise security standards across environments.