Senior DevSecOps Engineer: Cloud & App Security Lead

Thndr; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Thndr is seeking a Senior Cyber Security Engineer / DevSecOps who can bridge offensive and defensive security within product and infrastructure teams. You will champion security from the ground up, embedding with engineers to shape architecture and secure development practices.

Responsibilities include threat modeling, risk reviews, pre/post deployment tests, incident response, bug bounty coordination, and mentoring the security team while staying ahead of trends and tooling.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or related field or equivalent experience.
• 5+ years of application and/or infrastructure penetration testing experience beyond automated tools.
• Strong in security code reviews; Python experience a plus.
• Solid cloud and containerization understanding (AWS/Azure/GCP; Docker/Kubernetes).
• Experience with security policies across environments (servers, networks, monitoring).
• Excellent communication to both technical and non-technical stakeholders.
• Experience with SIEM, EDR, IDS, CSPM, CWPP tools.

Responsibilities

• Review new features with product/engineering to improve security.
• Drive SDLC security integration and threat modeling.
• Mentor the security team and promote best practices.
• Conduct pre-deployment and post-deployment security tests.
• Plan and execute web, mobile, and cloud security assessments and pen tests.
• Identify security issues via red teaming with Infra teams.
• Define and monitor infrastructure security measures.
• Contribute to security roadmap and backlog.
• Evaluate and integrate security tools as needed.
• Coordinate incident response and remediation with the company.
• Lead vulnerability research and remediation in prod/stage environments.
• Improve security logging and monitoring solutions.
• Manage bug-bounty program and security channels.

Skills

Penetration testing

Security code reviews

Threat modeling

Cloud security

Secure SDLC

Incident response

Mentoring

Bug bounty coordination

Network security

Security architecture

Education

Bachelor's degree in CS/Software Engineering

Tools

Docker

Kubernetes

Git

AWS/Azure/GCP

Fortinet

SIEM

EDR

IDS

CSPM

CWPP

Serverless/Lambda

Job description

Thndr is seeking a Senior Cyber Security Engineer / DevSecOps who can bridge offensive and defensive security within product and infrastructure teams. You will champion security from the ground up, embedding with engineers to shape architecture and secure development practices.

Responsibilities include threat modeling, risk reviews, pre/post deployment tests, incident response, bug bounty coordination, and mentoring the security team while staying ahead of trends and tooling.