DevSecOps Engineer (Security)
AppLab Systems, Inc · Austin, TX · 1 wk ago
On-siteEngineeringFull-time
Location: Austin, TX – Full‑time
Responsibilities
- Pipeline Security Integration: Design and maintain automated security gates within CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) using SAST, DAST, and SCA tools.
- Infrastructure as Code (IaC) Security: Develop and enforce security policies for IaC (Terraform, CloudFormation, Ansible) using tools like Checkov, Terrascan, or OPA (Open Policy Agent). Focusing on IAM roles, encryption at rest/transit, and VPC security.
- Container & Kubernetes Security: Secure the container lifecycle, from base image hardening and vulnerability scanning to runtime security in Kubernetes.
- Vulnerability Management: Lead the “triage‑to‑remediation” workflow. Work directly with developers to provide actionable fixes for security findings rather than just handing over PDF reports.
- Threat Modeling: Conduct architectural threat modeling sessions for new features to identify design‑level risks before a single line of code is written.
- Compliance Automation: Implement Compliance‑as‑Code to ensure the platform meets standards like SOC2, ISO 27001, or HIPAA automatically.