Senior Software Engineer - Security & DevSecOps (Hybrid)

UNAVAILABLE; Simi Hills (CA); Hybrid; USD 87,210 - 125,265; Full time

Benefits offered by this job

401K matching

Medical, dental, vision coverage

Hybrid work arrangements

Parental bonding leave

Employee discount program

Job summary

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience (EngExp). You will drive DevSecOps maturation, triage vulnerabilities across code and infrastructure, and serve as a bridge to GSO, auditors, and clients.

You will read code, fix issues where possible, and influence security through hands-on collaboration. The role emphasizes practical fixes, strong collaboration with engineering teams, and integrating security into CI/CD pipelines.

Qualifications

• 3+ years of software or infrastructure engineering with hands-on security exposure.
• Bachelor's degree or equivalent experience.
• Ability to read code and infrastructure configuration, beyond scanner outputs.
• Familiarity with AWS and Kubernetes for credible technical discussions.

Responsibilities

• Triage and respond to vulnerabilities identified via security tools and tests.
• Analyze infrastructure and code to assess real risk and impact.
• Manage vulnerability queue end-to-end: intake, prioritization, tracking, validation.
• Explain findings to engineers and stakeholders to drive fixes.
• Remediate vulnerabilities when possible and coordinate cross-team actions.
• Integrate security checks into GitLab CI/CD pipelines for early detection.
• Contribute to security standards and coach teams on best practices.
• Verify AI-generated fixes against real code and runtime contexts.

Skills

3+ years software/infrastructure

Read code and infra config

AWS/Kubernetes fluency

Translate findings for non-security

Education

Bachelor's degree or equivalent experience

Tools

Jira

Terraform

Kubernetes

GitLab CI/CD

Job description

CJ is seeking a Software Engineer 3 focused on security within Engineering Experience (EngExp). You will drive DevSecOps maturation, triage vulnerabilities across code and infrastructure, and serve as a bridge to GSO, auditors, and clients.

You will read code, fix issues where possible, and influence security through hands-on collaboration. The role emphasizes practical fixes, strong collaboration with engineering teams, and integrating security into CI/CD pipelines.