REMOTE--Senior DevSecOps Engineer – AI Security & Application Security Automation

IntePros; United States; On-site; USD 180,000 - 230,000; Full time

Job summary

Intepros is seeking a highly experienced Senior DevSecOps Engineer focused on AI-assisted security automation and secure software delivery. This hands-on role emphasizes strengthening application security throughout the SDLC with advanced testing, supply chain security, automation, and AI-powered capabilities.

The selected engineer will collaborate with application development teams to implement secure delivery practices, remediate vulnerabilities, automate security controls, and leverage AI

Qualifications

• 10+ years in DevOps/DevSecOps or related fields.
• Hands-on security testing and secure SDLC experience.
• Experience integrating security into CI/CD pipelines.

Responsibilities

• Perform advanced application security analysis using SAST, SCA, and dependency analysis.
• Design and implement automated security controls and gates in CI/CD.
• Collaborate with development teams to remediate vulnerabilities in SDLC.
• Leverage AI-powered security tools to accelerate remediation.
• Strengthen software supply chain and container security.
• Evaluate emerging AI-driven security capabilities.

Skills

DevSecOps

Application security

SAST & SCA

CI/CD automation

Scripting/Automation

Tools

GitHub Copilot

SonarQube

Nexus IQ

HCL AppScan

Qualys

Job description

Senior DevSecOps Engineer – AI Security & Application Security Automation

We are seeking a highly experienced, hands-on Senior DevSecOps Engineer with deep expertise in application security, AI-assisted security analysis, vulnerability management, and CI/CD security automation.

This is not a traditional DevOps engineering role. The primary focus is strengthening application security throughout the Software Development Lifecycle (SDLC) through advanced security testing, software supply chain security, automation, and emerging AI-powered security capabilities.

The selected engineer will join an established DevOps team and work closely with application development teams to implement secure delivery practices, remediate vulnerabilities, automate security controls, and leverage AI technologies to improve developer productivity and accelerate security remediation.

Key Responsibilities

• Perform advanced application security analysis using SAST, SCA, dependency analysis, and software supply chain security solutions.
• Leverage AI-powered security tools, coding assistants, and automation to identify vulnerabilities, recommend remediation strategies, and accelerate code fixes.
• Design and implement automated security controls, quality gates, and remediation workflows within CI/CD pipelines.
• Partner directly with development teams to address vulnerabilities, improve secure coding practices, and strengthen security throughout the SDLC.
• Analyze, prioritize, and manage application security findings to reduce risk and improve overall security posture.
• Enhance software supply chain security, including dependency management and container/image security.
• Evaluate and implement emerging AI-driven security capabilities to improve security analysis, remediation efficiency, and developer productivity.
• Help strengthen the security, stability, and scalability of CI/CD pipelines across hybrid environments.

Required Qualifications

• 10+ years of experience in DevOps, DevSecOps, Application Security, Secure Software Engineering, or related disciplines.
• Deep hands-on expertise in DevSecOps, application security, SAST, SCA, vulnerability management, and software supply chain security.
• Experience using AI technologies such as LLMs, MCP servers, AI agents, AI Skills, and AI coding assistants for security analysis, vulnerability remediation, or code improvements.
• Hands-on experience with AI development tools such as GitHub Copilot, Claude Code, Codex, Antigravity, or similar platforms.
• Experience with security solutions such as GitHub Advanced Security, SonarQube, Sonatype Nexus IQ, HCL AppScan, Prisma, Qualys, or comparable tools.
• Strong experience integrating security scanning, automated controls, and quality gates into CI/CD pipelines.
• Experience with GitHub, GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build, or similar CI/CD technologies.
• Strong scripting and automation background.
• Understanding of DAST, dependency analysis, secure coding, and modern application security practices.
• Proven ability to work collaboratively with application development teams to identify, prioritize, and remediate security vulnerabilities.

Ideal Candidate

An experienced, hands-on DevSecOps or Application Security Engineer who has implemented automated security controls within enterprise CI/CD environments and is actively leveraging AI-powered tools to improve vulnerability detection, remediation, and software delivery.

This position is focused on application security engineering, AI-assisted security automation, and secure software delivery—not traditional infrastructure-focused DevOps.