Cyber-Security Operations Analyst III, Product AppSec

About the role

We're looking for a Cyber-Security Operations Analyst to operate, monitor, and support secure software delivery infrastructure across cloud and platform engineering environments. You'll partner with Software Engineering, Security, Infrastructure, and Platform teams to strengthen CI/CD pipelines, automate deployment workflows, and enhance operational reliability. This role sits at the intersection of development velocity and security, helping modernize workflows and implement scalable DevSecOps practices that support enterprise software, cloud-native services, and AI-enabled products.

Responsibilities

• Operate and maintain CI/CD pipelines, build agents, and supporting infrastructure across development, staging, and pre-production environments
• Configure and integrate application security tooling, including logging, monitoring, alerting, and dashboard management
• Support SIEM operations including log onboarding, detection tuning, alert triage, and incident response
• Manage patching of CI/CD infrastructure, build agents, container base images, and platform dependencies
• Maintain health, availability, and performance of security tools and DevSecOps platform components
• Partner with IT and Engineering teams on CI/CD toolchain support, including upgrades, capacity planning, and access management
• Collaborate with engineering teams to triage issues, document workflows, and share operational knowledge

Requirements

• 5+ years of experience in DevOps, Platform Engineering, SRE, or a related technical role
• 3+ years of hands-on experience with security testing tools (SAST, DAST, SCA)
• Experience designing and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or similar
• Proficiency with IaC tools (Terraform, Ansible, or equivalent) and cloud environments (AWS, Azure, or GCP)
• Strong Linux administration skills and experience with Kubernetes, Docker, and Git
• Familiarity with regulated or compliance-driven environments

Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent experience

Skills

• Experience with software supply chain security frameworks (SLSA, NIST SSDF, OWASP SCVS)
• Relevant certifications such as CDP, GCSA, CCSP, CKS, or cloud security certifications (Azure, AWS, GCP)
• Experience with agentic AI development practices
• Familiarity with TCP/IP networking, DNS, SSL/TLS, and network security fundamentals