Senior Container Security Engineer - DevSecOps Lead

Automatic Data Processing, Inc.; Alpharetta (GA); Hybrid; USD 75,000 - 184,000; Full time

Job summary

ADP is seeking a Senior Container Application Security Engineer to design, implement, and manage container security scanning services within the Global Security Organization. The role partners with stakeholders to assess risks and establish governance for secure container image use before production release.

You will drive container security operations, support DevOps integration, and help develop SBOM and VEX solutions.

Qualifications

• Bachelor's degree or equivalent.
• Five years or more experience in IT or cybersecurity roles, with three or more years in software engineering.
• Knowledge of container security and related risks.
• Familiarity with internet technologies and web development best practices.
• Experience communicating security concepts to a broad range of stakeholders.
• Understanding of Agile methodologies, cloud, container and application security.
• Familiarity with microservices architecture and design patterns.
• Nice-to-have: CEH, CISSP, CSSLP, GCIA, GPEN, GWAPT.

Responsibilities

• Drive container security operations and supply chain risk initiatives across ADP units.
• Build and support security in DevOps pipelines and institutionalize container image scanning per shift-left strategy.
• Support management of supply chain vulnerabilities, image provenance, adversarial container security, and governance, risk, and compliance (GRC).
• Develop solutions for a Container Security Bill of Materials (CSBom) and a Vulnerability Exchange (VEX).
• Promote secure container development through training, governance, and metrics.
• Maintain awareness of container cybersecurity threats and best practices; enable secure/hardened scale.
• Customize policies, rules, and alerts to comply with established policies.
• Provide weekly scanning and monitoring reports; identify KPIs/KRIs for improvement.
• Create and maintain SOPs; perform other duties as required.

Skills

Container security

DevSecOps

CI/CD pipelines

Cloud security

Software engineering

Education

Bachelor's degree

Tools

Docker

OCI

Jenkins

Bitbucket

Rally/JIRA

Artifactory/Nexus

SonarQube

Snyk

Job description

ADP is seeking a Senior Container Application Security Engineer to design, implement, and manage container security scanning services within the Global Security Organization. The role partners with stakeholders to assess risks and establish governance for secure container image use before production release.

You will drive container security operations, support DevOps integration, and help develop SBOM and VEX solutions.