Staff DevSecOps Engineer

You will design and automate security controls across cloud infrastructure, containers, and software delivery systems. You will build hardened images, integrate scanning and compliance checks, manage secrets and access controls, create audit evidence, remediate weaknesses, and establish reusable security engineering patterns across teams.

Responsibilities

• Design and implement security controls across AWS infrastructure and platform services
• Build and maintain hardened container and base images
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems
• Automate security and compliance checks
• Implement secrets management, identity, and access controls
• Build audit evidence, configuration validation, and compliance reporting mechanisms
• Identify security weaknesses and drive remediation
• Translate security requirements into scalable engineering controls
• Integrate security controls without compromising reliability or developer workflows
• Define reusable patterns and drive adoption of security engineering practices

Requirements

• 7+ years of related experience for Staff Engineer, or equivalent education and experience
• Experience implementing security controls in AWS or another major cloud environment
• Experience with infrastructure-as-code and automated infrastructure provisioning
• Experience securing containerized workloads and hardened container images
• Experience integrating security tooling into CI/CD or software delivery systems
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation
• Experience implementing identity, secrets, and access controls
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language
• Ability to diagnose security and configuration issues
• Experience implementing shared technical controls with security and engineering teams

Benefits

• Bonus
• Benefits
• Equity