Staff DevSecOps Engineer: Secure Cloud & Container

Shield AI; San Mateo, Northern (CA, KY); Hybrid; USD 180,000 - 280,000; Full time

Job summary

Shield AI is seeking a DevSecOps Engineer to design, build, and automate security controls across cloud infrastructure, CI/CD, and container workloads. You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical controls.

This hands-on role focuses on repeatable, maintainable configurations across AWS, containers, and platform services, improving security while preserving developer velocity and reliability.

Qualifications

• 5+ years of related experience for Senior Engineer or 7+ years for Staff Engineer.
• Experience implementing security controls in AWS or another major cloud environment.
• Experience with infrastructure-as-code and automated infrastructure provisioning.
• Experience securing containerized workloads and building or maintaining hardened container images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
• Experience implementing identity, secrets, and access controls in cloud or engineering environments.
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.
• Experience working with security and engineering teams to implement shared technical controls.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
• Automate security and compliance checks to reduce manual review and improve consistency.
• Implement secrets management, identity, and access controls across infrastructure and engineering systems.
• Build mechanisms for audit evidence, configuration validation, and compliance reporting; identify weaknesses and drive remediation.
• Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls.
• Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability or developer workflows.
• At the Staff level, define reusable patterns and drive adoption of security engineering practices across multiple teams.

Skills

Cloud security

AWS security

Infrastructure as code

Container security

CI/CD security

Python/Go/Bash scripting

Vulnerability management

Identity and access controls

Audit/compliance reporting

Security automation

Education

Equivalent education and experience

Tools

Terraform

CI/CD tooling

Job description

Shield AI is seeking a DevSecOps Engineer to design, build, and automate security controls across cloud infrastructure, CI/CD, and container workloads. You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to translate security requirements into practical controls.

This hands-on role focuses on repeatable, maintainable configurations across AWS, containers, and platform services, improving security while preserving developer velocity and reliability.