Staff DevSecOps Engineer: Secure Cloud & CI/CD Automation

Shield AI; San Mateo (CA); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Excellent Medical Coverage

Mental Health Employee Assistance Plan

Paid Parental Leave

Pet Insurance

Flexible Work Hours

Onsite Gym (DC)

Gym Discount (San Diego)

Free Parking

Competitive Compensation

Stock Benefits

401K Services and Match

Job summary

Shield AI in San Mateo, CA seeks a hands-on DevSecOps Engineer to design, build, and automate security controls across cloud infrastructure, software delivery systems, and containerized workloads.

You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical engineering controls and repeatable configurations, balancing security with developer productivity.

Qualifications

• Experience implementing security controls in AWS or another major cloud environment.
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.
• Experience working with security and engineering teams to implement shared technical controls.
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language.
• Experience implementing identity, secrets, and access controls in cloud or engineering environments.
• Experience securing containerized workloads and building or maintaining hardened container images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Familiarity with software supply-chain security, artifact integrity, or signing/attestation workflows.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
• Automate security and compliance checks to reduce manual review and improve consistency.
• Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams.

Skills

IaC

AWS security

Vulnerability scanning

Container security

CI/CD security

Secrets management

Python

Go

Kubernetes security

Tools

Terraform

CI/CD tooling

Docker / containers

Job description

Shield AI in San Mateo, CA seeks a hands-on DevSecOps Engineer to design, build, and automate security controls across cloud infrastructure, software delivery systems, and containerized workloads.

You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical engineering controls and repeatable configurations, balancing security with developer productivity.