Senior DevSecOps Engineer: Secure Cloud & Automation

Virtuous; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive pay and Carta data-based另外

Bonus and recognition (Bonusly)

401(k) with company matching

Unlimited PTO

Volunteer time off

Healthcare benefits (medical, dental,

Parental leave

Company outings

Job summary

Virtuous is seeking a Senior DevSecOps Engineer to strengthen the security posture of our products, cloud infrastructure, and software delivery ecosystem. You’ll partner with Engineering, Cloud Engineering, DevOps, Architecture, and Security teams to embed security into design, development, deployment, and operations.

You will automate security across CI/CD, infrastructure, and runtime, leveraging AI-assisted tooling to create scalable, secure-by-default patterns that accelerate delivery while

Qualifications

• 5+ years of experience in Security Engineering or related security-focused engineering roles.
• Strong experience designing, securing, and modernizing Azure environments.
• Experience improving application security through secure SDLC practices, threat modeling, CI/CD security controls, and engineering partnership.
• Hands-on experience implementing DevSecOps capabilities such as SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy automation.
• Experience with Kubernetes, Docker, container security, IaC, and modern cloud-native platforms.
• Hands-on experience with GitHub, GitHub Actions, GitHub Advanced Security (or equivalent), SIEM platforms, observability tooling, and cloud security technologies.
• Strong automation, scripting, troubleshooting, and cross-functional collaboration skills, with a focus on scalable solutions and operational improvement.
• Experience leveraging AI-assisted engineering tools (such as GitHub Copilot, Claude Code, or similar) and a demonstrated curiosity for applying automation and emerging technologies to improve security and engineering outcomes.

Responsibilities

• Design, implement, and continuously improve secure Azure cloud architectures, networking, governance, and infrastructure to support scalable, secure-by-default engineering.
• Strengthen cloud security posture through infrastructure hardening, segmentation, secure connectivity patterns, RBAC/PIM, Azure Policy, and automated guardrails.
• Improve security visibility through logging, monitoring, SIEM integrations, detection engineering, and operational security tooling.
• Continuously assess and remediate cloud security risks, inherited infrastructure weaknesses, configuration drift, and operational security gaps.
• Embed security into infrastructure, platforms, and engineering workflows by collaborating with Cloud Engineering and DevOps teams to build secure-by-default solutions.
• Identify and address security risks in application architecture, authentication, APIs, and data flows throughout the product lifecycle.
• Integrate security capabilities into CI/CD pipelines and engineering workflows, including SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy-based controls.
• Lead threat modeling, architecture reviews, and secure design discussions to identify security risks early in the software development lifecycle.
• Build developer-friendly security guardrails, reusable patterns, and automations that improve security without slowing delivery velocity.
• Drive timely remediation of security findings by enabling engineering teams with practical guidance, automation, and secure-by-default patterns.

Skills

Azure security

DevSecOps

Threat modeling

Automation

CI/CD security

Kubernetes

Docker

GitHub Actions

Security tooling

AI in security

Tools

GitHub

GitHub Actions

GitHub Advanced Security

SIEM

Job description

Virtuous is seeking a Senior DevSecOps Engineer to strengthen the security posture of our products, cloud infrastructure, and software delivery ecosystem. You’ll partner with Engineering, Cloud Engineering, DevOps, Architecture, and Security teams to embed security into design, development, deployment, and operations.

You will automate security across CI/CD, infrastructure, and runtime, leveraging AI-assisted tooling to create scalable, secure-by-default patterns that accelerate delivery while