Senior DevSecOps Engineer – Embedded Linux Security

ALTEN Technology USA; Denver (CO); On-site; USD 125,000 - 150,000; Full time

Job summary

ALTEN Technology USA seeks a Sr DevSecOps Engineer to own the architecture for embedded platforms, shaping CI/CD, security automation, and release evidence. You’ll develop secure embedded software, Yocto distributions, and reusable automation while leading threat modeling and vulnerability practices.

You will drive secure boot, firmware signing, and lifecycle governance across product lines, collaborating with Product Security and Systems teams in a regulated environment.

Qualifications

• Strong experience in embedded Linux platform development for regulated, safety-critical, or high-reliability products.
• Experience with Yocto, BSPs, OS layers, kernel configuration, boot flows, device drivers, and embedded platform security.
• Experience developing or governing DevSecOps practices in regulated environments (medical, aerospace, automotive, etc).
• Knowledge of FDA cybersecurity expectations, IEC 62304, ISO 14971, ISO 13485, and SBOM practices.
• Experience implementing security automation in CI/CD pipelines (SAST, SCA, container scanning, signing).
• Strong threat modeling, vulnerability assessment, and secure-by-design reviews.

Responsibilities

• Define and own the DevSecOps architecture and roadmap for embedded platforms, including CI/CD pipelines and security automation.
• Develop and maintain secure embedded platform software, build infrastructure, and reusable automation.
• Create and support Yocto-based distributions, BSPs, drivers, hypervisors, and OS components.
• Establish secure software supply chain practices and vulnerability remediation workflows.
• Lead threat modeling and risk analysis for embedded components and map mitigations.
• Design secure boot, firmware signing, and authenticated update mechanisms.
• Support regulatory submissions and ensure traceability of cybersecurity evidence.
• Provide technical leadership and mentoring on secure coding and build automation.

Skills

Embedded Linux

DevSecOps

CI/CD

Threat modeling

Vulnerability analysis

Kernel drivers

Yocto

SBOM

Secure boot

Automation

Education

Bachelor's degree in Computer Science or Electrical Engineering

Tools

Yocto BSPs

Docker

Snyk

SonarQube

SCA

CI/CD pipelines

GitHub

GitLab

Job description

ALTEN Technology USA seeks a Sr DevSecOps Engineer to own the architecture for embedded platforms, shaping CI/CD, security automation, and release evidence. You’ll develop secure embedded software, Yocto distributions, and reusable automation while leading threat modeling and vulnerability practices.

You will drive secure boot, firmware signing, and lifecycle governance across product lines, collaborating with Product Security and Systems teams in a regulated environment.