Senior DevSecOps Engineer: Build Secure, Automated Pipelines

Justworks; New York (NY); On-site; USD 188,000 - 242,000; Full time

Job summary

Justworks is seeking a Senior DevSecOps Engineer in New York City to advance secure software development. You will lead security automation across CI/CD pipelines, embed security into Go/Rails/Vue templates, and harden the software supply chain with SBOMs and provenance.

You will collaborate with Platform Engineering and Digital Security to enforce IaC and Kubernetes policies, driving automated remediation and AI-assisted security reviews.

Qualifications

• 5+ years of professional experience in software engineering, infrastructure, or security engineering.
• 3+ years focused on application security, security automation, or DevSecOps practice.
• Hands-on experience integrating security tooling into CI/CD pipelines (GitHub Actions strongly preferred): SAST, SCA, secrets detection, container scanning.
• Proficiency with AWS security services (IAM, GuardDuty, Security Hub, CloudTrail) and cloud identity design.
• Experience with Kubernetes and infrastructure-as-code (Terraform preferred), including policy-as-code enforcement.
• Proficiency in at least one programming language (Go, Python, or Ruby preferred).
• Demonstrated ability to reduce security friction for engineers, with examples of controls teams adopted willingly.
• Strong written communication; you document as you build.

Responsibilities

• Own security automation across CI/CD pipelines (GitHub Actions): SAST, SCA, secrets detection, and container scanning that runs fast and flags things worth fixing.
• Build security into golden path templates for Go, Rails, and Vue.js services, so new services start secure by default.
• Harden our software supply chain: dependency management, artifact signing, SBOM generation, and provenance for what we ship.
• Implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement, catching misconfigurations before they reach an environment.
• Coordinate vulnerability exposure remediation across all of Engineering, including code vulnerabilities, infrastructure changes, and patching.
• Build vulnerability management automation that routes findings to owning teams with context, deduplicates noise, and tracks remediation without spreadsheets.
• Own implementation of secrets management patterns and tooling, driving elimination of long-lived credentials for short-lived, federated identity.
• Partner with Security on cloud security posture across AWS environments, ensuring Platform telemetry supports Detection & Response needs.
• Support Security's rollout of agentic penetration testing, and build auto-remediation that fixes findings before exploitation.
• Explore and roll out AI-assisted security review of code changes with guardrails to minimize false positives.
• Drive adoption through documentation and developer education to ensure controls are followed.
• Measure time-to-remediate, scan coverage, secrets findings, and mean time to patch to verify safety improvements.
• Serve as an advocate for secure development practices and how secure software is engineered.

Skills

Security engineering

CI/CD pipelines

Go/Python/Ruby

Kubernetes

AWS security services

Tools

GitHub Actions

Terraform

Kubernetes

Python

Job description

Justworks is seeking a Senior DevSecOps Engineer in New York City to advance secure software development. You will lead security automation across CI/CD pipelines, embed security into Go/Rails/Vue templates, and harden the software supply chain with SBOMs and provenance.

You will collaborate with Platform Engineering and Digital Security to enforce IaC and Kubernetes policies, driving automated remediation and AI-assisted security reviews.