Senior DevSecOps Engineer: Secure by Design in CI/CD

Justworks, Inc.; New York (NY); Hybrid; USD 188,000 - 242,000; Full time

Job summary

Justworks, Inc. is seeking a Senior DevSecOps Engineer to join the Platform Engineering team in New York.

You will shape secure software delivery across CI/CD, cloud, and infrastructure, partnering with Digital Security and Engineering to embed guardrails and automation. You’ll own security automation, implement IaC scanning, and drive vulnerability remediation, with AI-assisted reviews and a focus on least-privilege, identity, and secure templates for services.

Qualifications

• 5+ years of professional software, infrastructure, or security engineering.
• 3+ years in application security, security automation, or DevSecOps.
• Hands-on with security tooling in CI/CD pipelines (GitHub Actions preferred): SAST, SCA, secrets detection, container scanning.
• Proficiency with AWS security services (IAM, GuardDuty, Security Hub, CloudTrail) and least-privilege design.
• Experience with Kubernetes and infrastructure-as-code (Terraform); policy-as-code enforcement.
• Proficiency in Go, Python, or Ruby; you build tooling, not only configure.
• Strong written communication; document as you build.

Responsibilities

• Own security automation across CI/CD pipelines (GitHub Actions) including SAST, SCA, secrets detection, and container scanning.
• Build security into golden path templates for Go, Rails, and Vue.js services; start secure by default.
• Harden software supply chain: dependency management, artifact signing, SBOM generation, provenance.
• Implement infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement.
• Coordinate vulnerability exposure remediation across Engineering (code, infra, patches).
• Build vulnerability management automation routing findings to owning teams with context.
• Own secrets management patterns and drive short-lived credentials + federated identity.
• Partner with Security on cloud posture in AWS; ensure Platform telemetry supports Detection & Response.
• Support agentic penetration testing rollout and build auto-remediation for fixes.
• Explore AI-assisted security review of code with guardrails for high signal/low false positives.
• Drive adoption via documentation and developer education; make controls understood and followed.
• Measure time-to-remediate, scan coverage, secrets findings, mean time to patch.
• Advocate for secure development practices; define how secure software is engineered.

Skills

Security automation

CI/CD security

AWS security

Kubernetes

Terraform

Go/Python/Ruby

Documentation

Security mindset

Tools

GitHub Actions

SAST

SCA

Secrets detection

Container scanning

Terraform

Kubernetes

IAM

GuardDuty

Security Hub

CloudTrail

Job description

Justworks, Inc. is seeking a Senior DevSecOps Engineer to join the Platform Engineering team in New York.

You will shape secure software delivery across CI/CD, cloud, and infrastructure, partnering with Digital Security and Engineering to embed guardrails and automation. You’ll own security automation, implement IaC scanning, and drive vulnerability remediation, with AI-assisted reviews and a focus on least-privilege, identity, and secure templates for services.