Staff DevSecOps Engineer - Secure Cloud & Containers

Shield; San Diego (CA); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Shield AI is seeking a DevSecOps Engineer to design and implement security controls across AWS infrastructure, containers, and CI/CD systems. You will automate security checks, build hardened images, and partner with Cybersecurity and Build Engineering to translate security requirements into scalable controls.

The role emphasizes repeatable, secure configurations with a focus on reducing risk while preserving developer workflows.

Qualifications

• Minimum 5+ years in security engineering in cloud environments (Senior) or 7+ years (Staff).
• Experience implementing security controls in AWS or another major cloud.
• Experience with infrastructure-as-code and automated provisioning.
• Experience securing containerized workloads and building hardened images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Experience vulnerability management, dependency scanning, container scanning, or configuration validation.
• Experience with identity, secrets, and access controls in cloud environments.
• Experience automating security tasks with scripting languages (Python/Go/Bash).
• Ability to diagnose security/configuration issues across infra, containers, and platform services.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into delivery systems.
• Automate security and compliance checks to reduce manual reviews and improve consistency.
• Implement secrets management and identity/access controls across systems.
• Develop audit evidence, configuration validation, and compliance reporting mechanisms.
• Collaborate with Cybersecurity, Infosec, Build Engineering, and product teams to translate requirements into scalable controls.
• Drive adoption of secure engineering practices across teams.

Skills

Security engineering

Cloud security

CI/CD security tooling

Python/Go scripting

Vulnerability management

Identity and access controls

Security policy enforcement

Tools

AWS

Terraform

Kubernetes

Docker

Snyk/Trivy or similar scanners

Job description

Shield AI is seeking a DevSecOps Engineer to design and implement security controls across AWS infrastructure, containers, and CI/CD systems. You will automate security checks, build hardened images, and partner with Cybersecurity and Build Engineering to translate security requirements into scalable controls.

The role emphasizes repeatable, secure configurations with a focus on reducing risk while preserving developer workflows.