Senior AppSec & DevSecOps Engineer

Censys; United States; On-site; USD 172,000 - 216,000; Full time

Job summary

Censys is seeking a Staff Application Security Engineer to own and drive the AppSec/DevSecOps program across our engineering teams. You will design secure paths, guardrails, and automation to enable fast, secure software delivery at scale.

You will lead tooling in Kubernetes and GCP, integrate security into CI/CD, and guide AI/ML workflows with robust access control and provenance. This role emphasizes collaboration, mentorship, and security culture across the company.

Qualifications

• 10+ years of experience in Security Engineering, DevSecOps, SRE, or related roles.
• Deep expertise securing Kubernetes environments, including container images, network policies, and supply chain protections.
• Strong experience with Application Security tooling — dependency scanning, static analysis, and policy enforcement.

Responsibilities

• Own the AppSec/DevSecOps program roadmap across engineering and embed security into the SDLC.
• Design, build, and maintain DevSecOps tooling in Kubernetes and GCP, including AI/ML workloads.
• Lead integration of security into CI/CD pipelines with minimal friction.

Skills

Kubernetes security

DevSecOps

CI/CD tooling

GitHub Actions

ArgoCD

MITRE ATT&CK

GCP

Terraform

Crossplane

Python/Bash

Tools

Terraform

Crossplane

Job description

Censys is seeking a Staff Application Security Engineer to own and drive the AppSec/DevSecOps program across our engineering teams. You will design secure paths, guardrails, and automation to enable fast, secure software delivery at scale.

You will lead tooling in Kubernetes and GCP, integrate security into CI/CD, and guide AI/ML workflows with robust access control and provenance. This role emphasizes collaboration, mentorship, and security culture across the company.