DevSecOps Engineer

Description Of The Role

• Responsible for the design, implementation, and operational execution of secure development, cloud, and endpoint security practices
• Embeds information security controls directly into engineering and IT workflows
• Focus on vulnerability management, security baselines, threat modeling, and secure architecture
• Leverages AI capabilities, including AWS AI services and Claude to standardize, streamline, and scale security operations

• Design and implement secure architecture patterns across applications, CI/CD pipelines, and cloud platforms
• Conduct threat modeling and security design reviews for new systems and major changes
• Lead vulnerability management across Git Hub, AWS Inspector, Microsoft Defender, and Crowd Strike Falcon
• Ensure vulnerabilities are triaged, tracked, and remediated within defined SLAs
• Design and enforce AWS security baselines including VPCs, security groups, and perimeter controls
• Identify and remediate unintended network exposure
• Apply AWS AI services and Claude to standardize vulnerability analysis, remediation workflows, and reporting
• Ensure AI usage is auditable, explainable, and secure
• Develop and maintain security baselines aligned to NIST CSF, SOC 2, and HIPAA where applicable
• Produce audit-ready documentation and metrics
• Partner with Engineering and IT teams to integrate security into delivery processes
• Communicate security risks and remediation status to Information Security leadership

• 8+ years in Dev Sec Ops , security engineering, or cloud security roles
• Bachelor’s degree or equivalent experience in Computer Science, Engineering, or related field
• Strong experience with AWS, Git Hub, Microsoft Defender, Crowd Strike Falcon
• Expertise in vulnerability management and threat modeling
• Proficiency using AI tools (AWS AI services, Claude) to improve security operations
• Excellent documentation and communication skills