Senior DevSecOps Engineer

Soni; New York (NY); On-site; USD 140,000 - 175,000; Full time

Job summary

Soni seeks a Senior DevSecOps Engineer to lead security across AWS infrastructure, CI/CD pipelines, and containerized deployments. You will drive automated security controls, threat detection, and vulnerability management in a fast-paced cloud environment.

Join and strengthen security governance, IAM controls, and secure IaC practices while partnering with engineering to improve resilience and incident response readiness.

Qualifications

• 6+ years of DevSecOps, Cloud Security, or Security Engineering experience.
• Strong AWS experience including ECS Fargate, IAM, RDS, networking and monitoring.
• Experience securing CI/CD pipelines with GitHub Actions and GitLab CI/CD.
• Solid knowledge of SAST, DAST, SCA, container scanning and vulnerability management.
• Experience securing Docker containers and Kubernetes/ECS workloads.
• Strong secrets management and least-privilege access controls.
• Experience with IaC deployments using Terraform or CloudFormation.
• Experience with security monitoring, logging, and threat detection tools.
• Strong troubleshooting, incident response and risk assessment skills.

Responsibilities

• Design and implement secure DevSecOps practices across AWS and CI/CD pipelines.
• Integrate automated security scanning into GitHub and GitLab workflows.
• Secure containerized apps in ECS Fargate environments.
• Manage SAST/DAST/SCA and container vulnerability scanning solutions.
• Develop secrets management and credential protection strategies.
• Implement IAM governance and least-privilege access controls.
• Secure IaC deployments using Terraform or CloudFormation.
• Support vulnerability remediation, patching, and cloud security monitoring.
• Configure monitoring, logging, alerting, and threat detection.
• Collaborate with engineering to improve security posture and resilience.
• Support incident response, deployment validation, and security troubleshooting.

Skills

DevSecOps

Cloud Security

Security Engineering

GitHub Actions

GitLab CI/CD

AWS

ECS Fargate

IAM

RDS

Security Monitoring

Terraform

CloudFormation

Docker

Kubernetes

Tools

Terraform

CloudFormation

Docker

Kubernetes

ECS

Job description

We are seeking a Senior DevSecOps Engineer with strong AWS and cloud security expertise to lead the integration of security best practices across cloud infrastructure, CI/CD pipelines, and containerized application environments.

Responsibilities

• Design and implement secure DevSecOps practices across AWS infrastructure and CI/CD pipelines
• Integrate automated security scanning and validation into GitHub and GitLab workflows
• Secure containerized applications deployed in ECS Fargate environments
• Implement and manage SAST, DAST, SCA, and container vulnerability scanning solutions
• Develop and enforce secrets management and credential protection strategies
• Implement IAM governance and least-privilege access controls across cloud environments
• Secure Infrastructure-as-Code deployments using Terraform and/or CloudFormation
• Support vulnerability remediation, patching, and cloud security monitoring initiatives
• Configure monitoring, logging, alerting, and threat detection solutions
• Partner with engineering teams to improve security posture and operational resilience
• Support incident response, deployment validation, and security troubleshooting efforts

Required Qualifications

• 6+ years of DevSecOps, Cloud Security, or Security Engineering experience
• Strong AWS experience including ECS Fargate, IAM, RDS, networking, and security monitoring
• Experience securing CI/CD pipelines using GitHub Actions and/or GitLab CI/CD
• Strong understanding of SAST, DAST, SCA, container scanning, and vulnerability management
• Experience securing Docker containers and Kubernetes/ECS-based workloads
• Strong knowledge of secrets management, credential rotation, and least-privilege access controls
• Experience securing Infrastructure-as-Code deployments using Terraform or CloudFormation
• Experience with security monitoring, logging, and threat detection tools
• Strong troubleshooting, incident response, and risk assessment skills

Preferred Qualifications

• Experience supporting .NET applications in AWS environments
• Familiarity with AWS Security Hub, GuardDuty, CloudTrail, Datadog, Wiz, Prisma Cloud, or Aqua Security
• Experience supporting compliance frameworks such as SOC 2, ISO 27001, HIPAA, or PCI
• Experience with automated security governance and policy enforcement tooling
• Security certifications such as AWS Security Specialty, CISSP, Security+, or CKS