Cyber Security Analyst PSEG LI -DevSecOps Engineer

Select how often (in days) to receive an alert:

We’re one of the country’s largest energy companies, with a vision of powering a future where people use energy more efficiently and it’s safer and delivered more reliably than ever. We’re also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day.

Here, you’ll have the stability and exciting opportunities that come with being a Fortune 500 company — along with a supportive, friendly work environment where your contributions are valued.

We offer a flexible work environment designed to balance employee needs with collaboration and operational excellence. Roles fall into two categories:

• Hybrid: A blend of remote and onsite work, with at least three onsite days per week required.

As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits designed to support your total well-being:

• medical
• dental
• vision
• paternal leave and family leave programs
• behavioral health programs
• 401(k) with company match
• life insurance
• tuition reimbursement
• generous paid time off

More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you’re looking for a place where you can build a meaningful career and help power and support our communities, we’d love to welcome you to the team.

PSEG is not offering visa sponsorship for this position.

We are seeking an experienced Dev Sec Ops  Engineer who can build, integrate, and operationalize security within our Dev Ops processes and CI/CD pipelines. This role will focus on embedding security controls into the software development lifecycle, securing cloud infrastructure, and ensuring that applications and APIs meet enterprise security and compliance requirements.

Using a modern technology stack and agile approach, you will work closely with development, infrastructure, and cybersecurity teams to integrate automated security testing, vulnerability management, and compliance validation across our development and cloud environments.

• Integrate security controls into CI/CD pipelines to enable secure and automated software delivery.
• Develop and maintain Dev Sec Ops  pipelines that incorporate security scanning, code analysis, and compliance checks.
• Implement automated security testing including:
• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• API security testing
• Integrate and operationalize code security capabilities including code scanning, secret detection, and dependency vulnerability monitoring.
• Implement and maintain API security controls using tooling to monitor and protect enterprise APIs.
• Support container security practices including image scanning, artifact security, and repository management (e.g., Sonatype Nexus or equivalent).
• Work with development teams to remediate vulnerabilities identified through automated security tooling and penetration testing.
• Implement security best practices for cloud-native architectures, including infrastructure-as-code security validation.
• Support cloud security posture management (CSPM) initiatives to ensure cloud environments remain compliant with security policies and regulatory requirements.
• Develop automation scripts and tooling to support Dev Sec Ops  processes.
• Collaborate with security, infrastructure, and development teams to maintain secure deployment pipelines and reduce application security risk.
• Provide guidance and training to development teams on secure coding practices and Dev Sec Ops  principles.

• BS…