DevSecOps Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

qode.world · 1 day ago

DevSecOps Engineer

qode.world is seeking a DevSecOps Engineer to embed security throughout the software development lifecycle. The role involves collaborating with development, operations, and security teams to automate security controls and ensure scalable, compliant, and resilient systems in cloud and hybrid environments.

Artificial Intelligence (AI)Human ResourcesInformation Technology

Responsibilities

Integrate security practices into CI/CD pipelines (shift-left security)
Design, implement, and maintain secure cloud infrastructure (AWS, Azure, GCP)
Automate security testing (SAST, DAST, SCA, IaC scanning, container scanning)
Manage secrets, keys, and certificates securely (Vault, KMS, Secrets Manager)
Implement and monitor security controls for containers and Kubernetes
Perform threat modeling, risk assessments, and security architecture reviews
Respond to and investigate security incidents and vulnerabilities
Ensure compliance with standards (ISO 27001, SOC 2, PCI-DSS, HIPAA, etc.)
Collaborate with developers to improve secure coding practices
Maintain logging, monitoring, and alerting for security events

Qualification

CI/CD toolsCloud platformsInfrastructure as CodeContainerizationOrchestrationSecurity toolsScripting/programmingNetworking fundamentalsLinux systemsZero Trust architectureOWASP Top 10SIEM/SOAR toolsSecurity certificationsRegulated environments

Required

Strong experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)
Proficiency in cloud platforms (AWS, Azure, or GCP)
Infrastructure as Code (Terraform, CloudFormation, ARM)
Containerization and orchestration (Docker, Kubernetes)
Security tools: SAST/DAST, dependency scanning, container security tools
Scripting/programming (Python, Bash, Go, or similar)
Solid understanding of networking, IAM, and security fundamentals
Experience with Linux systems

Preferred

Experience with Zero Trust architecture
Knowledge of OWASP Top 10 and secure coding standards
Familiarity with SIEM/SOAR tools
Security certifications (e.g., CISSP, CISM, CCSP, AWS Security Specialty)
Experience in regulated environments

Company

qode.world

twittertwitter
company-logo
SaaS, AI Agent in Recruitment, HR Tech

Funding

Current Stage
Growth Stage
Company data provided by crunchbase