Senior DevSecOps Specialist

You will integrate security throughout the software development lifecycle, partnering with development and DevOps teams. You will build AI-assisted code review and automated security testing, protect CI/CD pipelines and the software supply chain, investigate findings, and implement practical security improvements.

Responsibilities

• Design, implement, and improve security controls across CI/CD pipelines and GitHub repositories
• Lead AI-powered security code review implementation and improvement across pull requests, CI/CD pipelines, and development workflows
• Establish secure code review practices, including branch protection, approval rules, CODEOWNERS, and critical-change reviews
• Implement and maintain automated security testing, including SAST, SCA, and secrets scanning
• Integrate AI-assisted verification with traditional security scanning tools
• Configure and optimize security quality gates
• Strengthen software supply chain security for dependencies, CI/CD permissions, builds, and artifact integrity
• Identify workflow security weaknesses and implement preventive controls
• Develop scripts, integrations, and automation tools to reduce manual security work
• Investigate security findings, prioritize remediation, and improve secure coding practices with development teams
• Support Cloudflare security-service configuration and improvement when required
• Contribute to security engineering and infrastructure security automation initiatives

Requirements

• 5+ years of practical DevSecOps, DevOps, or similar technical security experience
• Hands-on experience with GitHub, GitHub Actions, and CI/CD security
• Experience implementing AI-powered security code review in pull request, CI/CD, and automated verification workflows
• Experience implementing SAST, SCA, and secrets scanning solutions
• Experience establishing secure code review workflows, branch protection policies, and automated security checks
• Understanding of secure software development, application vulnerabilities, and software supply chain risks
• Security automation and scripting experience with Python, Bash, or similar languages
• Understanding of cloud infrastructure security fundamentals, including AWS IAM, access management, and secrets management
• Ability to independently implement security improvements and troubleshoot technical issues
• Communication and collaboration skills for working with development teams
• Experience with Cloudflare security products, Kubernetes, Docker, AWS, Terraform, Infrastructure as Code security scanning, mobile application security, DAST, SBOM generation, artifact signing, supply chain security frameworks, custom AI security agents, evaluation frameworks, automated vulnerability triage, or security-sensitive industries

Benefits

• Remote work from anywhere in the world
• Unlimited vacation
• Birthday presents
• Compensation for necessary technical devices
• Paid sick leave