Staff DevSecOps Engineer (R5824)

Job description

Job responsibilities

• Design and implement security controls across AWS infrastructure and platform services
• Build and maintain hardened container images and secure base images for engineering and production workloads
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems
• Automate security and compliance checks to reduce manual review and improve consistency
• Implement secrets management, identity, and access controls across infrastructure and engineering systems
• Build mechanisms for audit evidence, configuration validation, and compliance reporting Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams
• Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls
• Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability or developer workflows

Job requirements

• 5+ years of related experience for Senior Engineer or 7+ years for Staff Engineer, or equivalent education and experience.
• Experience implementing security controls in AWS or another major cloud environment
• Experience with infrastructure-as-code and automated infrastructure provisioning
• Experience securing containerized workloads and building or maintaining hardened container images
• Experience integrating security tooling into CI/CD or software delivery systems
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation
• Experience implementing identity, secrets, and access controls in cloud or engineering environments
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language