Senior DevSecOps Engineer

📋 Description

• Own security automation across our CI/CD pipelines (GitHub Actions): SAST, SCA, secrets detection
• Build security into our golden path templates for Go, Rails, and Vue.js services, so new services
• Harden our software supply chain: dependency management, artifact signing, SBOM generation, and
• Implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement
• Coordinate vulnerability exposure remediation across all of Engineering, including code
• Build vulnerability management automation that routes findings to owning teams with context

🎯 Requirements

• 5+ years of professional experience in software engineering, infrastructure, or security engineering
• 3+ years focused on application security, security automation, or DevSecOps practice
• Hands-on experience integrating security tooling into CI/CD pipelines (GitHub Actions strongly
• Proficiency with AWS and its security services (IAM, GuardDuty, Security Hub, CloudTrail); you
• Experience with Kubernetes and infrastructure-as-code (Terraform preferred), including
• Proficiency in at least one programming language (Go, Python, or Ruby preferred); you build