DevSecOps Engineer

Essential Functions Of The Role

• Design and implement secure architecture patterns across applications, CI/CD pipelines, and cloud platforms
• Conduct threat modeling and security design reviews for new systems and major changes
• Lead vulnerability management across GitHub, AWS Inspector, Microsoft Defender, and CrowdStrike Falcon
• Ensure vulnerabilities are triaged, tracked, and remediated within defined SLAs
• Design and enforce AWS security baselines including VPCs, security groups, and perimeter controls
• Identify and remediate unintended network exposure
• Apply AWS AI services and Claude to standardize vulnerability analysis, remediation workflows, and reporting
• Ensure AI usage is auditable, explainable, and secure
• Develop and maintain security baselines aligned to NIST CSF, SOC 2, and HIPAA where applicable
• Produce audit-ready documentation and metrics
• Partner with Engineering and IT teams to integrate security into delivery processes
• Communicate security risks and remediation status to Information Security leadership

Qualifications

• 8+ years in DevSecOps, security engineering, or cloud security roles
• Bachelor’s degree or equivalent experience in Computer Science, Engineering, or related field
• Strong experience with AWS, GitHub, Microsoft Defender, CrowdStrike Falcon
• Expertise in vulnerability management and threat modeling
• Proficiency using AI tools (AWS AI services, Claude) to improve security operations
• Excellent documentation and communication skills