Staff DevSecOps Engineer: Cloud Security & Automation

Shield AI; San Diego (CA); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Bonus

Benefits

Equity

Job summary

Shield AI is seeking a DevSecOps Engineer to design, build, and automate security controls across AWS infrastructure, CI/CD pipelines, and containerized workloads. You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical engineering controls.

This hands-on role focuses on repeatable, maintainable configurations and secure patterns. You will reduce security risk while preserving fast software delivery, working across

Qualifications

• 5+ years for Senior Engineer or 7+ years for Staff Engineer, or equivalent education and experience.
• Experience implementing security controls in AWS or another major cloud environment.
• Experience with infrastructure-as-code and automated infrastructure provisioning.
• Experience securing containerized workloads and building or maintaining hardened container images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
• Experience implementing identity, secrets, and access controls in cloud or engineering environments.
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.
• Experience working with security and engineering teams to implement shared technical controls.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
• Automate security and compliance checks to reduce manual review and improve consistency.
• Implement secrets management, identity, and access controls across infrastructure and engineering systems.
• Build mechanisms for audit evidence, configuration validation, and compliance reporting.
• Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams.
• Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls.
• Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability or developer workflows.
• At the Staff level, Define reusable patterns and drive adoption of security engineering practices across multiple teams.

Skills

AWS security

Infrastructure as Code

Container security

Python/Go scripting

Identity and access controls

CI/CD security

Vulnerability management

Tools

Terraform

CI/CD tooling

Job description

Shield AI is seeking a DevSecOps Engineer to design, build, and automate security controls across AWS infrastructure, CI/CD pipelines, and containerized workloads. You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical engineering controls.

This hands-on role focuses on repeatable, maintainable configurations and secure patterns. You will reduce security risk while preserving fast software delivery, working across