Staff DevSecOps Engineer: Cloud Security & Automation Leader

Precision Labs; San Mateo (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Shield AI seeks a DevSecOps Engineer to design, build, and automate security controls across AWS infrastructure and platform services. You will partner with Cybersecurity, Infosec, and Build Engineering to translate security requirements into practical engineering controls.

This hands-on role focuses on secure configurations, repeatability, and maintainability across infrastructure, containers, CI/CD systems, and platform services to reduce risk without hindering engineers.

Qualifications

• 5+ years experience for Senior Engineer; 7+ years for Staff Engineer, or equivalent.
• Experience implementing security controls in AWS or another cloud.
• Experience with infrastructure-as-code and automated provisioning.
• Experience securing containerized workloads and hardened container images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
• Experience implementing identity, secrets, and access controls in cloud or engineering environments.
• Experience automating security tasks using Python, Go, Bash, or similar languages.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
• Automate security and compliance checks to reduce manual review and improve consistency.
• Implement secrets management, identity, and access controls across infrastructure and engineering systems.
• Build mechanisms for audit evidence, configuration validation, and compliance reporting; identify security weaknesses and drive remediation.
• Partner with Cybersecurity/Infosec to translate security requirements into scalable controls.
• Work with Build/Cloud Engineering to integrate controls without impacting reliability or developer workflows.
• At Staff level, define reusable patterns and drive adoption of security engineering practices across teams.

Skills

Security engineering

Cloud security

CI/CD security

Python/Go/Bash

Vulnerability management

Identity & access control

Configuration validation

Education

Bachelor's degree or equivalent

Tools

AWS

Kubernetes

Job description

Shield AI seeks a DevSecOps Engineer to design, build, and automate security controls across AWS infrastructure and platform services. You will partner with Cybersecurity, Infosec, and Build Engineering to translate security requirements into practical engineering controls.

This hands-on role focuses on secure configurations, repeatability, and maintainability across infrastructure, containers, CI/CD systems, and platform services to reduce risk without hindering engineers.