Senior DevSecOps Engineer - Embedded Security & Automation

Stevens; United States; A distancia; USD 124.000 - 165.000; Jornada completa

Descripción de la vacante

Stevens is seeking a Senior DevSecOps Engineer to embed with a client’s security and platform engineering team in a large enterprise. You’ll integrate security across the SDLC, from static analysis to container hardening, while defining standards and reusable automation.

You’ll lead advisory and hands-on work, orchestrating CI/CD enhancements, Terraform-based infrastructure, and secure pipelines. The role emphasizes collaboration with engineers and security leadership to accelerate delivery.

Formación

• Eight+ years of hands-on experience in application security, DevSecOps or platform engineering.
• Proven experience with SAST/SCA tooling and scaling results.
• Experience migrating Jenkins to GitHub Actions or similar CI/CD migrations.
• Solid knowledge of Terraform and infrastructure as code.
• Strong collaboration across multiple teams in complex enterprise environments.
• Familiarity with SBOMs, artifact provenance and supply chain controls.
• Ability to balance security rigor with delivery timelines.

Responsabilidades

• Design, implement, and operate SAST/SCA automation integrated into developer workflows and CI/CD.
• Build and refine vulnerability management workflows with triage and closure.
• Strengthen software supply chain security across dependencies and build systems.
• Develop CI/CD automation and GitHub-based tooling that secures delivery.
• Create IaC and reusable automation frameworks for team adoption.
• Improve container and dependency security, including image scanning.
• Evaluate AI-assisted security capabilities to improve productivity.
• Establish standards and reference implementations for engineering teams.

Conocimientos

8+ years DevSecOps experience

SAST & SCA tooling

CI/CD automation

GitHub Actions

Jenkins to GitHub Actions migration

Terraform / IaC

Container security

Communication & stakeholder mgmt

Python/Bash scripting

Herramientas

SonarQube

Nexus IQ

Nexus Repository

GitHub Actions

Descripción del empleo

Stevens is seeking a Senior DevSecOps Engineer to embed with a client’s security and platform engineering team in a large enterprise. You’ll integrate security across the SDLC, from static analysis to container hardening, while defining standards and reusable automation.

You’ll lead advisory and hands-on work, orchestrating CI/CD enhancements, Terraform-based infrastructure, and secure pipelines. The role emphasizes collaboration with engineers and security leadership to accelerate delivery.