DevSecOps Engineer

About the role

USCS is dedicated to advancing, innovating, and serving companies seeking "Best in Service", facilities, and logistics in the cold chain. We are an employee-focused, equal opportunity employer.

Responsibilities

• Partner with Security and DevOps teams to implement secure design patterns and guardrails.
• Deliver training and guidance to developers on secure development and DevSecOps best practices.
• Define and operationalize security practices and automation into CI/CD pipelines using Azure DevOps and GitHub workflows.
• Provide hands-on guidance for secure coding, application architecture, and threat modeling.
• Design and review secure authentication and authorization models using Azure AD, OAuth2, and OpenID Connect.
• Manage and integrate security tools (SAST, DAST, SCA) into the development lifecycle.
• Support secure development in Azure environments, including App Services, Functions, and infrastructure-as-code.
• Help identify, triage, and remediate application security vulnerabilities and misconfigurations.
• Automate compliance and security checks across development and deployment workflows.
• Promote a collaborative, security-first culture across development, DevOps, and cloud engineering teams.

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or related field.
• 4+ years of experience in DevSecOps, application security, or software development with a security focus.
• Strong experience with Azure development, including Azure App Services, Azure Functions, Azure AD, and cloud-native tooling.
• Hands-on experience with Azure DevOps for managing CI/CD pipelines and secure software delivery.
• Experience with IaC tooling and securing CI/CD delivery platforms (e.g., Terraform, Ansible, GitHub, Jenkins).
• In-depth understanding of web application security, secure software development, and threat modeling.
• Hands-on experience with integrating security tools such as SonarQube, Veracode, Snyk, or similar.
• Experience with securing API’s and policy enforcement.

Preferred Qualifications

• Experience with Azure Cloud.
• Programming experience in JavaScript.
• Experience with static code analysis tooling.
• Experience with container security and Kubernetes-based application security.
• Familiarity with secrets management and Azure key vault services.
• Relevant certifications such as AZ-500, CSSLP, OSWE, GIAC DevSecOps, or equivalent.

What We Are Looking For

The ideal candidate will have or be able to complete the above qualifications.

Location and Department

Camden, NJ, IT/Cybersecurity

Job Type, EEO, and Job Code

Full-Time, Exempt, Salaried, Biweekly Paid

Pay

$130,000.00 - $150,000.00/yr.

Benefits

• 401K and Educational Assistance after 1 year.
• Blue Cross Blue Shield available after 30 days of service, if elected.
• Company Life Insurance.
• A variety of additional benefits and perks.