Staff DevSecOps Engineer: Secure Cloud, Containers & CI/CD

Precision Labs; San Diego (CA); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Shield AI is seeking a DevSecOps Engineer to design and automate security controls across cloud infrastructure and containerized workloads. You will collaborate with Cybersecurity and Build Engineering to translate requirements into scalable engineering controls while maintaining reliability and developer velocity.

The role emphasizes hands-on implementation, automation, and audit readiness across AWS, containers, and CI/CD pipelines in a fast-growing defense-tech environment.

Qualifications

• 5+ years for Senior Engineer or 7+ years for Staff Engineer, or equivalent education and experience.
• Experience implementing security controls in AWS or another major cloud environment.
• Experience with infrastructure-as-code and automated infrastructure provisioning.
• Experience securing containerized workloads and building or maintaining hardened container images.
• Experience integrating security tooling into CI/CD or software delivery systems.
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation.
• Experience implementing identity, secrets, and access controls in cloud or engineering environments.
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language.
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services.
• Experience working with security and engineering teams to implement shared technical controls.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services.
• Build and maintain hardened container images and secure base images for engineering and production workloads.
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems.
• Automate security and compliance checks to reduce manual review and improve consistency.
• Implement secrets management, identity, and access controls across infrastructure and engineering systems.
• Build mechanisms for audit evidence, configuration validation, and compliance reporting; identify security weaknesses and drive remediation.
• Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls.
• Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability.
• At the Staff level, define reusable patterns and drive adoption of security engineering practices across multiple teams.

Skills

AWS security controls

Infrastructure as code

Container security

CI/CD tooling integration

Vulnerability management

Identity, secrets, access controls

Python/Go/Bash automation

Security diagnosis across infra

Collaborating with security and eng

Tools

Terraform

Kubernetes

CI/CD tooling

Job description

Shield AI is seeking a DevSecOps Engineer to design and automate security controls across cloud infrastructure and containerized workloads. You will collaborate with Cybersecurity and Build Engineering to translate requirements into scalable engineering controls while maintaining reliability and developer velocity.

The role emphasizes hands-on implementation, automation, and audit readiness across AWS, containers, and CI/CD pipelines in a fast-growing defense-tech environment.