Senior DevSecOps Engineer - Cloud & GCP Security

Black-Duck-Software; Burlington (MA); On-site; USD 136,000 - 180,000; Full time

Job summary

Black Duck Software, Inc. seeks a Sr DevSec Engineer, Cloud Operations to own and optimize our global SaaS and Hosted infrastructure on Google Cloud Platform.

You will drive end-to-end reliability, security, and automation across engineering, product, and IT teams in a fast-paced environment. The role emphasizes hands-on GCP expertise, Kubernetes-native deployment, and proactive incident management, with a commitment to AI-assisted optimization and compliance with SOC2 Type 2, ISO-27001, and

Qualifications

• 7+ years' experience in 24x7 production operations supporting a highly available SaaS or cloud service environment.
• Strong emphasis on information security and compliance such as SOC2 Type 2, ISO-27001, NIST 800-53.

Responsibilities

• Design, build, and maintain resilient, secure, and highly available infrastructure on GCP for SaaS and Hosted services.
• Automate deployment pipelines, monitoring, and incident response using CI/CD and GitOps practices.
• Monitor site stability and performance using GCP observability tooling and troubleshoot across the stack.
• Own end-to-end operational responsibility for customer-facing environments, including availability and change management.
• Collaborate with Engineering, Product, Services and other teams; drive feature rollouts via containerized, Kubernetes-native deployment patterns.
• Develop and improve runbooks, procedures, and documentation with AI/LLM tools to accelerate automation.

Skills

GCP

Kubernetes

Docker

Terraform

Python

Bash

Go

CI/CD

GitOps

Education

Bachelor's degree in Computer Science or related field

Tools

Jenkins

GitHub Actions

ArgoCD

Job description

Black Duck Software, Inc. seeks a Sr DevSec Engineer, Cloud Operations to own and optimize our global SaaS and Hosted infrastructure on Google Cloud Platform.

You will drive end-to-end reliability, security, and automation across engineering, product, and IT teams in a fast-paced environment. The role emphasizes hands-on GCP expertise, Kubernetes-native deployment, and proactive incident management, with a commitment to AI-assisted optimization and compliance with SOC2 Type 2, ISO-27001, and