Senior DevSecOps Security Engineer

istaridigital.ai; United States; Remote; USD 135,000 - 220,000; Full time

Benefits offered by this job

Bonuses

Equity

Benefits

Job summary

istaridigital.ai seeks a senior DevSecOps leader to own and evolve pipeline security tooling, automate secure feedback, and expand testing and incident response capabilities across development and deployment. You will translate compliance requirements into risk-based checks for government and regulated environments, guiding engineering and security teams with minimal friction.

You will map controls to NIST RMF, implement code analysis, SCA, secrets scanning, and container scanning in CI/CD, and

Qualifications

• 7+ years in DevSecOps, application security, or security engineering roles.
• 3+ years owning CI/CD security tooling.
• Experience mapping controls to NIST RMF/800-53; evidence prep.

Responsibilities

• Own and improve pipeline security tooling for code analysis, dependency risks, secrets detection, container scanning, and artifact signing.
• Assess tool coverage, address gaps, guide tool selection and roadmap.
• Map compliance and risk framework requirements to pipeline controls, thresholds, and evidence.
• Develop automated and manual penetration testing with fast feedback to engineering teams.
• Help build security operations and incident response processes with automation and human review.
• Use scripting and AI-assisted methods to improve security workflows, triage, or remediation quality.

Skills

DevSecOps

Application security

Security operations

Incident response

Security engineering

Scripting/Automation

Tools

GitHub

Argo CD

JFrog

Snyk

Job description

istaridigital.ai seeks a senior DevSecOps leader to own and evolve pipeline security tooling, automate secure feedback, and expand testing and incident response capabilities across development and deployment. You will translate compliance requirements into risk-based checks for government and regulated environments, guiding engineering and security teams with minimal friction.

You will map controls to NIST RMF, implement code analysis, SCA, secrets scanning, and container scanning in CI/CD, and