Security-Focused Software Engineer 3 (DevSecOps)

CJ; Atlanta (GA); Hybrid; USD 89,000 - 136,000; Full time

Benefits offered by this job

401K matching

Medical, dental, vision coverage

Flexible time off

Paid holidays

Employee Referral Program

Hybrid work arrangements

Job summary

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevSecOps practices. You will work with engineering teams to identify, prioritize, and close vulnerabilities in CJ's code and infrastructure.

You will bridge the gap between engineering and security leadership, auditors, and clients, turning findings into actionable guidance. This hands-on role requires reading and fixing code when possible, and driving secure practices across CI/CD and deployments.

Qualifications

• 3+ years of software or infrastructure engineering experience with hands-on security exposure.
• Bachelor's degree or equivalent; ability to read code and infrastructure configs.
• Familiarity with AWS and Kubernetes for practical security discussions.
• Ability to translate findings for non-security stakeholders and drive fixes.

Responsibilities

• Analyze infrastructure and code to provide evidence-backed risk assessments.
• Manage vulnerability queue end-to-end from intake to fixes validation.
• Collaborate with engineers to articulate threats and remediation paths.
• Remediate when possible and drive fixes through partnerships when needed.
• Integrate security checks into CI/CD pipelines for early detection.
• Contribute to security standards and coach teams on best practices.
• Validate AI-proposed fixes against real code, config, and runtime context.

Skills

Security engineering

Code reading

AWS

Kubernetes

CI/CD

Education

Bachelor's degree or equivalent experience

Tools

Veracode

Wiz

SAST/DAST tooling

Jira

GitLab CI/CD

Terraform

Job description

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience to advance DevSecOps practices. You will work with engineering teams to identify, prioritize, and close vulnerabilities in CJ's code and infrastructure.

You will bridge the gap between engineering and security leadership, auditors, and clients, turning findings into actionable guidance. This hands-on role requires reading and fixing code when possible, and driving secure practices across CI/CD and deployments.