Senior DevSecOps Engineer - AWS Security & CI/CD Automation

Soni; New York (NY); On-site; USD 140,000 - 175,000; Full time

Job summary

Soni seeks a Senior DevSecOps Engineer to lead security across AWS infrastructure, CI/CD pipelines, and containerized deployments. You will drive automated security controls, threat detection, and vulnerability management in a fast-paced cloud environment.

Join and strengthen security governance, IAM controls, and secure IaC practices while partnering with engineering to improve resilience and incident response readiness.

Qualifications

• 6+ years of DevSecOps, Cloud Security, or Security Engineering experience.
• Strong AWS experience including ECS Fargate, IAM, RDS, networking and monitoring.
• Experience securing CI/CD pipelines with GitHub Actions and GitLab CI/CD.
• Solid knowledge of SAST, DAST, SCA, container scanning and vulnerability management.
• Experience securing Docker containers and Kubernetes/ECS workloads.
• Strong secrets management and least-privilege access controls.
• Experience with IaC deployments using Terraform or CloudFormation.
• Experience with security monitoring, logging, and threat detection tools.
• Strong troubleshooting, incident response and risk assessment skills.

Responsibilities

• Design and implement secure DevSecOps practices across AWS and CI/CD pipelines.
• Integrate automated security scanning into GitHub and GitLab workflows.
• Secure containerized apps in ECS Fargate environments.
• Manage SAST/DAST/SCA and container vulnerability scanning solutions.
• Develop secrets management and credential protection strategies.
• Implement IAM governance and least-privilege access controls.
• Secure IaC deployments using Terraform or CloudFormation.
• Support vulnerability remediation, patching, and cloud security monitoring.
• Configure monitoring, logging, alerting, and threat detection.
• Collaborate with engineering to improve security posture and resilience.
• Support incident response, deployment validation, and security troubleshooting.

Skills

DevSecOps

Cloud Security

Security Engineering

GitHub Actions

GitLab CI/CD

AWS

ECS Fargate

IAM

RDS

Security Monitoring

Terraform

CloudFormation

Docker

Kubernetes

Tools

Terraform

CloudFormation

Docker

Kubernetes

ECS

Job description

Soni seeks a Senior DevSecOps Engineer to lead security across AWS infrastructure, CI/CD pipelines, and containerized deployments. You will drive automated security controls, threat detection, and vulnerability management in a fast-paced cloud environment.

Join and strengthen security governance, IAM controls, and secure IaC practices while partnering with engineering to improve resilience and incident response readiness.