Remote DevSecOps Engineer — Secure CI/CD & Cloud

Serco; Boston (MA); Remote; USD 120,000 - 170,000; Full time

Job summary

Serco is seeking an Experienced DevSecOps Engineer for a 100% remote role. The candidate will embed security into the SDLC, build and maintain secure CI/CD pipelines, and automate infrastructure with IaC tools like Terraform and CloudFormation. This role requires DoW Secret clearance readiness and U.S.

citizenship. Responsibilities include integrating SAST/DAST and container scanning, collaborating with cross-functional teams, and staying ahead of threats and best practices.

Qualifications

• U.S. Citizenship required.
• Minimum 5 years of experience in DevOps, Security Engineering, Software Engineering, or Cloud Engineering.
• Proficiency with Azure.
• Experience with CI/CD tools: Jenkins, GitLab CI, GitHub Actions.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools and practices into development and deployment workflows (SAST, DAST, container scanning).
• Collaborate with development, operations, and security teams to ensure secure software delivery.
• Automate infrastructure provisioning and configuration using IaC tools such as Terraform or CloudFormation.
• Monitor systems for security vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments for new and existing systems.
• Stay current with emerging security threats, technologies, and best practices.

Skills

CI/CD pipelines

Cloud Infrastructure

Security Engineering

Azure

Jenkins

GitLab CI

GitHub Actions

Terraform

CloudFormation

SAST/DAST

Docker

Kubernetes

Python

Education

Bachelor’s degree

Tools

Terraform

CloudFormation

Docker

Kubernetes

Job description

Serco is seeking an Experienced DevSecOps Engineer for a 100% remote role. The candidate will embed security into the SDLC, build and maintain secure CI/CD pipelines, and automate infrastructure with IaC tools like Terraform and CloudFormation. This role requires DoW Secret clearance readiness and U.S.

citizenship. Responsibilities include integrating SAST/DAST and container scanning, collaborating with cross-functional teams, and staying ahead of threats and best practices.