DevSecOps Engineer

** THIS ROLE IS 1 DAY ON SITE IN NYC - PLEASE DO NOT APPLY IF YOU CANNOT ADHERE TO THIS REQUIREMENT - NO VISAS/THIRD PARTIES **We are working with a leading organization looking to add a hands-on DevSecOps Engineer to its cybersecurity team.This person will work closely with development, cloud, infrastructure, and security teams to build security directly into applications, CI/CD pipelines, and cloud environments.What You'll Be Doing:Build and maintain security controls within CI/CD pipelines, including automated testing and security gates.Manage application security tooling across SAST, SCA, secrets scanning, dependency scanning, and code security.Identify and remediate security risks across applications, APIs, cloud environments, containers, Kubernetes, and infrastructure.Automate security processes using Python, PowerShell, Bash, APIs, and integrations.Support vulnerability management across tools such as Snyk, Wiz, Sysdig, Tenable, and GitHub.Partner directly with engineering teams on threat modeling, secure code reviews, and security design reviews.Help improve security reporting, dashboards, developer self-service, and automated evidence collection. What We're Looking For:7+ years of overall IT/engineering experience, with 5+ years across DevSecOps, Application Security, Cloud Security, Security Engineering, or Software Engineering.Strong experience securing CI/CD environments such as GitHub Actions, Azure DevOps, GitLab CI, or Jenkins.Hands-on experience with AWS and/or Azure.Experience with SAST, SCA, secrets scanning, container security, and IaC security.Strong scripting/automation experience with Python, PowerShell, Bash, or similar.Experience with Terraform, CloudFormation, Kubernetes, APIs, and cloud-native environments is a plus.Strong communication skills and the ability to work directly with developers and engineering teams. This is a hands-on engineering role for someone who can build and automate security solutions, not just review findings and make recommendations.