Secure DevSecOps Engineer – AI & Automation

Altera; San Jose (CA); On-site; USD 130,000 - 180,000; Full time

Job summary

Altera is seeking an AppSec / DevSecOps Engineer to strengthen application and software supply chain security across a global organization. This role will embed security into the software development lifecycle through secure design, assessments, automated security testing, CI/CD security controls, developer enablement, and continuous improvement.

The team protects software, engineering platforms, cloud services, and intellectual property by embedding security throughout the development lifecycle

Qualifications

• Responsibilities include defining secure SDLC standards, embedding security across planning, architecture, design, coding, testing, release, deployment and operations.
• Develop security gates based on risk, data sensitivity, business criticality, and deployment model.
• Implement and operate SAST, DAST, software composition analysis, secrets detection, container scanning, API security, and IaC scanning.

Responsibilities

• Define and maintain secure software development lifecycle standards and guidance.
• Embed security requirements across planning, architecture, design, coding, testing, release and deployment.
• Develop security gates based on risk, data sensitivity and deployment model.
• Support secure architecture reviews, threat modeling, and live risk assessments.
• Establish secure coding standards for languages, frameworks, APIs, cloud services.

Job description

Altera is seeking an AppSec / DevSecOps Engineer to strengthen application and software supply chain security across a global organization. This role will embed security into the software development lifecycle through secure design, assessments, automated security testing, CI/CD security controls, developer enablement, and continuous improvement.

The team protects software, engineering platforms, cloud services, and intellectual property by embedding security throughout the development lifecycle