Senior DevSecOps Engineer — AI-Driven Security Tooling

Istari Digital; Oregon; Hybrid; USD 135,000 - 220,000; Full time

Benefits offered by this job

Bonuses

Equity

Benefits package

Job summary

Istari Digital seeks a Senior Security Engineer to lead security tooling that tests and validates software against compliance and cybersecurity standards, ensuring a trustworthy toolchain. You will translate RMF/NIST requirements into automated, risk-based controls and contribute early to application security and security operations across the SDLC.

You'll drive automated testing, pen-testing capabilities, and faster incident response with an AI-first approach.

Qualifications

• 7+ years in DevSecOps, app security, security operations and incident response.
• Hands-on experience configuring SAST, SCA, secrets detection and container scanning in CI/CD.
• Mapping tooling and controls to NIST RMF/800-53 or RMF requirements with evidence.
• Experience evaluating, selecting, or evolving security tooling with cross-team influence.
• Scripting or automation in Python or Bash.

Responsibilities

• Own the security tooling pipeline (SAST, SCA, secrets detection, container scanning, signing).
• Mature security operations and incident response capabilities with automation.
• Define long-term roadmap for tooling in partnership with Cybersecurity leadership.
• Translate RMF/NIST requirements into enforceable gates and policies.
• Drive shift-left adoption and AI-enabled vulnerability triage and remediation.

Skills

CI/CD tooling ownership

SAST/SCA tool configuration

NIST RMF/800-53 mapping

Python/Bash scripting

AI-based security automation

U.S. citizenship

DoD 8140 eligibility

Tools

GitHub

Argo CD

JFrog

Snyk

Job description

Istari Digital seeks a Senior Security Engineer to lead security tooling that tests and validates software against compliance and cybersecurity standards, ensuring a trustworthy toolchain. You will translate RMF/NIST requirements into automated, risk-based controls and contribute early to application security and security operations across the SDLC.

You'll drive automated testing, pen-testing capabilities, and faster incident response with an AI-first approach.