Senior DevSecOps Engineer: CI/CD Security & Automation

Stevens; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Stevens is seeking a Senior DevSecOps Engineer to join a client’s security and platform engineering team in a large enterprise environment. You’ll be embedded with the client’s team, defining security in the software development lifecycle and building automation that accelerates delivery.

Role includes hands-on pipeline work, tooling, and architecture beyond advisory work, with opportunity to drive reusable automation and secure CI/CD practices across cloud infrastructure.

Qualifications

• Eight or more years of relevant experience in application security, DevSecOps, or platform engineering.
• Strong hands-on capability in security tooling and pipelines.
• Experience with large enterprise security programs and governance.

Responsibilities

• Design, implement, and operate advanced SAST and SCA automation integrated into CI/CD pipelines.
• Build vulnerability management workflows with triage and ownership.
• Strengthen software supply chain security across dependencies and provenance.
• Develop CI/CD automation and GitHub-based security controls.
• Create infrastructure as code and reusable automation frameworks.
• Improve container security and image scanning practices.
• Evaluate AI-assisted security capabilities for developer productivity.
• Establish standards and reference implementations for teams.
• Communicate findings to engineers and leadership.
• Document configurations and decisions for maintainability.

Skills

8+ years experience

SAST & SCA tooling

Nexus Repository

Vulnerability management

SBOMs & provenance

GitHub Actions CI/CD

Jenkins to GitHub Actions migration

Terraform & IaC

Container security

AI-assisted security tooling

Scripting (Python/Bash/PowerShell)

Effective communication

Tools

SonarQube

Nexus IQ

Nexus Repository

Job description

Stevens is seeking a Senior DevSecOps Engineer to join a client’s security and platform engineering team in a large enterprise environment. You’ll be embedded with the client’s team, defining security in the software development lifecycle and building automation that accelerates delivery.

Role includes hands-on pipeline work, tooling, and architecture beyond advisory work, with opportunity to drive reusable automation and secure CI/CD practices across cloud infrastructure.