Senior DevSecOps Engineer

We are seeking a Senior DevSecOps Engineer with strong AWS and cloud security expertise to lead the integration of security best practices across cloud infrastructure, CI/CD pipelines, and containerized application environments.

Responsibilities

• Design and implement secure DevSecOps practices across AWS infrastructure and CI/CD pipelines
• Integrate automated security scanning and validation into GitHub and GitLab workflows
• Secure containerized applications deployed in ECS Fargate environments
• Implement and manage SAST, DAST, SCA, and container vulnerability scanning solutions
• Develop and enforce secrets management and credential protection strategies
• Implement IAM governance and least-privilege access controls across cloud environments
• Secure Infrastructure-as-Code deployments using Terraform and/or CloudFormation
• Support vulnerability remediation, patching, and cloud security monitoring initiatives
• Configure monitoring, logging, alerting, and threat detection solutions
• Partner with engineering teams to improve security posture and operational resilience
• Support incident response, deployment validation, and security troubleshooting efforts

Required Qualifications

• 6+ years of DevSecOps, Cloud Security, or Security Engineering experience
• Strong AWS experience including ECS Fargate, IAM, RDS, networking, and security monitoring
• Experience securing CI/CD pipelines using GitHub Actions and/or GitLab CI/CD
• Strong understanding of SAST, DAST, SCA, container scanning, and vulnerability management
• Experience securing Docker containers and Kubernetes/ECS-based workloads
• Strong knowledge of secrets management, credential rotation, and least-privilege access controls
• Experience securing Infrastructure-as-Code deployments using Terraform or CloudFormation
• Experience with security monitoring, logging, and threat detection tools
• Strong troubleshooting, incident response, and risk assessment skills

Preferred Qualifications

• Experience supporting .NET applications in AWS environments
• Familiarity with AWS Security Hub, GuardDuty, CloudTrail, Datadog, Wiz, Prisma Cloud, or Aqua Security
• Experience supporting compliance frameworks such as SOC 2, ISO 27001, HIPAA, or PCI
• Experience with automated security governance and policy enforcement tooling
• Security certifications such as AWS Security Specialty, CISSP, Security+, or CKS