Senior DevSecOps Engineer: Secure Cloud & CI/CD

AAA Auto Club Enterprises; Costa Mesa (CA); On-site; USD 110,000 - 146,000; Full time

Benefits offered by this job

Health coverage

401(K) + Pension

Tuition assistance

Floating holidays & PTO

Paid parental leave

Wellness programs

Employee discounts

Job summary

AAA Auto Club Enterprises is seeking a DevSecOps Engineer to embed security in engineering platforms, CI/CD pipelines, and workflows. You will lead secure-by-default development and scalable security tooling across on-prem and cloud-native environments.

The role covers AWS/Azure, Kubernetes, container workloads, and automated delivery pipelines, with emphasis on governance, automation, and collaboration with engineering teams.

Qualifications

• 5+ years in software/DevOps/DevSecOp roles in regulated environments.
• Strong security experience securing CI/CD pipelines and modern stacks.
• Cloud experience (AWS/Azure) and container platforms.
• Proficient in Python or Bash; Linux and Git familiarity.
• Excellent communication to explain risks to engineering teams.

Responsibilities

• Embed automated security controls into CI/CD pipelines and gates.
• Develop internal DevSecOps tooling and platform extensions.
• Monitor production and cloud environments for misconfigurations.
• Lead cloud security architecture across AWS and Azure.
• Evaluate and integrate SAST/DAST/SCA tools; standardize tooling.
• Translate regulatory requirements into automated engineering controls.
• Collaborate with developers on secure coding and safe cloud config.
• Lead vulnerability management and remediation with threat modeling.

Skills

CI/CD Security

Cloud security

Container security

Secure coding

Security tooling

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity

Tools

Docker

Kubernetes

OpenShift

Snyk

SonarQube

Nexus

Job description

AAA Auto Club Enterprises is seeking a DevSecOps Engineer to embed security in engineering platforms, CI/CD pipelines, and workflows. You will lead secure-by-default development and scalable security tooling across on-prem and cloud-native environments.

The role covers AWS/Azure, Kubernetes, container workloads, and automated delivery pipelines, with emphasis on governance, automation, and collaboration with engineering teams.