Senior DevSecOps Engineer: Secure SDLC & Automation

Stevens; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Stevens is seeking a Senior DevSecOps Engineer to join a client’s security and platform engineering team in a large enterprise. You’ll be embedded with the client’s team, shaping secure SDLC practices, building automation, and guiding CI/CD security through GitHub Actions, Terraform, and container security.

You’ll work hands-on to accelerate security pipelines, integrate SAST/SCA tooling, and create reusable automation while collaborating across engineering and security leadership.

Qualifications

• Eight or more years of relevant experience in application security, DevSecOps, platform engineering, or a closely related discipline.
• Deep experience with SAST and SCA tooling including integration, tuning, and scaling results.
• Hands‑on with Nexus Repository or similar artifact repositories; governance and policy enforcement.
• Knowledge of SBOMs, provenance, and dependency governance.
• Strong CI/CD experience with GitHub Actions and reusable workflows.
• Experience migrating from Jenkins to GitHub Actions or similar migrations.
• Experience with Terraform and infrastructure as code; building reusable automation.
• Solid container security knowledge including image scanning and runtime hardening.
• Interest in AI‑assisted security and developer tooling.
• Scripting skills (Python, Bash, PowerShell) and cross‑team collaboration.

Responsibilities

• Design, implement, and operate SAST and SCA automation integrated into developer workflows and CI/CD.
• Develop and refine vulnerability management workflows from triage to remediation.
• Strengthen software supply chain security across dependencies and build systems.
• Build CI/CD automation that enforces security without slowing delivery.
• Create infrastructure as code and reusable automation frameworks for teams.
• Improve container and dependency security, including image scanning and governance.
• Evaluate AI‑assisted security capabilities to boost developer productivity.
• Communicate findings and recommendations clearly to engineers and leadership.
• Document decisions and configurations to ensure ongoing maintenance.

Skills

SAST & SCA tooling

GitHub Actions

Terraform

CI/CD

Python scripting

Jenkins to GitHub Actions

Container security

Security automation

Tools

SonarQube

Nexus IQ

Terraform

GitHub

Job description

Stevens is seeking a Senior DevSecOps Engineer to join a client’s security and platform engineering team in a large enterprise. You’ll be embedded with the client’s team, shaping secure SDLC practices, building automation, and guiding CI/CD security through GitHub Actions, Terraform, and container security.

You’ll work hands-on to accelerate security pipelines, integrate SAST/SCA tooling, and create reusable automation while collaborating across engineering and security leadership.