Senior DevSecOps Engineer: Cloud Security & CI/CD

OpenTalent; Naperville (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

OpenTalent in Naperville, IL seeks a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines.

You will manage SAST/DAST/SCA tooling across AWS and GCP, automate triage, and establish secure multi-cloud patterns with identity federation and IaC security. This role accelerates software delivery while reducing security overhead.

Qualifications

• 3–5+ years in DevSecOps, cloud security, or platform security engineering.
• Multi-cloud experience (AWS and GCP) with IAM/KMS proficiency.
• Strong Terraform or AWS CDK skills for guardrails as code.
• Hands-on CI/CD security tooling integration (SAST/DAST/SCA, containers).
• Experience with container runtimes, image scanning (ECR, Trivy).
• Proficiency in CloudWatch and SIEM for security findings triage.

Responsibilities

• Implement and maintain automated security scanning across pipelines.
• Triage findings and automate remediation workflows.
• Develop secure multi-cloud guardrails (AWS to GCP) including identity federation.
• Enforce IaC security automation (Terraform, Checkov, Trivy).
• Serve as SME for cloud security tooling and CI/CD security.
• Tune tools to reduce false positives and noise.
• Coordinate during security events and contribute to post-mortems.

Skills

DevSecOps

Cloud security

Multi-cloud

IaC security

CI/CD automation

SAST/DAST/SCA

Container security

AWS & GCP

Tools

Terraform

AWS CDK

GitHub Actions

AWS CodeBuild

Jenkins

Trivy

Checkov

IAM

VPC

CloudWatch / SIEM

Job description

OpenTalent in Naperville, IL seeks a DevSecOps Engineer to embed automated security guardrails, vulnerability scanning, and compliance controls into our cloud platform and CI/CD pipelines.

You will manage SAST/DAST/SCA tooling across AWS and GCP, automate triage, and establish secure multi-cloud patterns with identity federation and IaC security. This role accelerates software delivery while reducing security overhead.