Staff DevSecOps Engineer: Cloud Security & CI/CD Lead

Trase Systems; Seattle (WA); On-site; USD 170,000 - 245,000; Full time

Benefits offered by this job

Career track opportunity with rapidAdv

100% employer paid health care for you

Paid maternity/paternity 14 weeks

Unlimited PTO

Professional development

401K, FSA, and equity incentives

Mental health benefits

Job summary

Trase Systems is hiring a Staff DevSecOps Engineer to own security in the software development lifecycle and cloud operations.

You will integrate automated security testing, vulnerability management, and secure coding practices into CI/CD pipelines using SAST, DAST, SCA, secrets, and IaC scanning, deployed as code. You will enable high-velocity delivery while maintaining controls required by customers and regulators.

Qualifications

• 10+ years in security engineering, DevSecOps, or similar roles.
• Deep experience securing modern CI/CD pipelines with SAST, DAST, SCA, secrets, IaC scanning.
• Strong cloud security expertise, especially in GCP or multi-cloud.
• Expert-level Terraform skills and secure-by-default IaC modules.

Responsibilities

• Design, build, and operate shift-left security toolchain across CI/CD pipelines (SAST, DAST, SCA, secrets, container, IaC).
• Design and deploy production cloud security architecture (GCP focus, multi-cloud as needed).
• Embed security controls into platform abstractions and Kubernetes runtimes.
• Operate SIEM and security telemetry, build detections and dashboards.
• Lead incident response, runbooks, on-call design, and post-incident reviews.

Skills

Security engineering

DevSecOps

Cloud security

Terraform

Python or Go

SIEM

Incident response

LLMs & AI agents

Secure CI/CD pipelines

Leadership / mentoring

Tools

Terraform

Kubernetes

SAST/DAST/DAI

SCA/secrets scanning

Job description

Trase Systems is hiring a Staff DevSecOps Engineer to own security in the software development lifecycle and cloud operations.

You will integrate automated security testing, vulnerability management, and secure coding practices into CI/CD pipelines using SAST, DAST, SCA, secrets, and IaC scanning, deployed as code. You will enable high-velocity delivery while maintaining controls required by customers and regulators.