Senior AI-Driven DevSecOps Architect

Icon Ventures; United States; Remote; USD 135,000 - 220,000; Full time

Job summary

Istari Digital seeks a Senior Security Engineer to lead security tooling across the SDLC, implementing automated controls and risk-based gates aligned with NIST RMF/SP 800-53/171. The role focuses on SAST/SCA tooling, pen-testing, and security operations, with AI-enabled automation and government-grade security posture.

You will drive secure-by-default principles, automate validation, and enable fast, trusted feedback for engineers.

Qualifications

• 7+ years in DevSecOps, application security, security operations and incident response, and general security engineering, including at least 3 years owning security tooling in CI/CD pipelines.
• Deep hands-on experience configuring, tuning, and enforcing SAST, SCA, secrets detection, and container scanning tools in production pipelines, including risk-based gates, vulnerability thresholds, and exception processes.
• Demonstrated experience mapping security tooling and pipeline controls to NIST SP 800-53, NIST SP 800-171, or RMF requirements, and producing evidence for assessments or authorizations.
• Track record of evaluating, selecting, or evolving security tooling, and influencing engineering teams without direct authority.
• Scripting or automation experience in Python, Bash, or similar.
• Security+ or equivalent DoD 8140 qualifying certification, or ability to obtain within 2 months of hire.
• U.S. citizen residing and working in the U.S.

Responsibilities

• Own and evolve the security toolchain, including SAST, SCA, secrets detection, container scanning, and artifact signing.
• Assess tooling effectiveness, identify gaps, and lead improvements or consolidation as needs evolve.
• Develop automated and manual pen-testing capabilities with rapid feedback loops into engineering.
• Mature security operations and incident response capabilities with automation.
• Define the long-term roadmap for security tooling and processes in partnership with leadership.

Skills

CI/CD tooling ownership

Python scripting

Risk mapping to RMF/NIST

DoD 8140 readiness

US security clearance

Tools

SAST tooling

SCA tooling

Secrets detection

Container scanning

Artifact signing

Job description

Istari Digital seeks a Senior Security Engineer to lead security tooling across the SDLC, implementing automated controls and risk-based gates aligned with NIST RMF/SP 800-53/171. The role focuses on SAST/SCA tooling, pen-testing, and security operations, with AI-enabled automation and government-grade security posture.

You will drive secure-by-default principles, automate validation, and enable fast, trusted feedback for engineers.