Senior DevSecOps Engineer - Cloud Security & CI/CD

Mondo; Danboro (PA); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

401K

PTO

Tuition reimbursement

Job summary

Mondo in Danboro, PA seeks a Senior DevSecOps Engineer to design and implement automated security controls integrated into CI/CD pipelines, enabling fast deployments with strong security coverage.

You will harden AWS security across customer-facing and internal systems, build policy-as-code automation, own vulnerability management, and collaborate with Infra, AI, and IS teams. This is a permanent, hybrid role starting ASAP.

Qualifications

• 5-8 years of experience in cloud security, DevSecOps, or security engineering.
• Deep expertise in AWS security services including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail.
• Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity.
• Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK.
• Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically.
• Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field.

Responsibilities

• Design and implement automated security scanning (SAST, SCA, DAST) embedded into CI/CD pipelines.
• Continuously assess, harden, and elevate the security posture of AWS cloud infrastructure.
• Build event-driven, policy-as-code automation to detect and auto-remediate security issues in near real-time.
• Define the security architecture for AI-powered applications, including data access controls and auditability.
• Own the end-to-end vulnerability management lifecycle with automated remediation of vulnerabilities and misconfigurations.
• Collaborate with infrastructure, AI engineering, and IS teams to integrate threat response across the tech stack.
• Define and lead security incident response playbooks, root-cause analyses, and post-incident reviews.

Skills

Cloud security

DevSecOps

Automation

Scripting

Security architecture

Education

Bachelor's degree in CS/IS/Engineering

AWS Security Specialty

CISSP

CCSP

Tools

AWS

Terraform

AWS CDK

Docker

Kubernetes

CI/CD tooling

Python

Go

Bash

SAST/DAST/SCA

Job description

Mondo in Danboro, PA seeks a Senior DevSecOps Engineer to design and implement automated security controls integrated into CI/CD pipelines, enabling fast deployments with strong security coverage.

You will harden AWS security across customer-facing and internal systems, build policy-as-code automation, own vulnerability management, and collaborate with Infra, AI, and IS teams. This is a permanent, hybrid role starting ASAP.