Senior Security Automation Engineer; DevSecOps

What You’ll Be Building

• Compliance-as-Code (STIG, CIS, ISO 27001 controls enforced programmatically)
• Immutable, hardened Linux images built through container workflows
• CI/CD pipelines with embedded security gates (Git Lab)
• Automated vulnerability management pipelines (scan → triage → remediate → verify)
• Infrastructure-as-Code for security tooling and scanning platforms

This isn’t maintenance work—this is greenfield engineering
.

Your code will secure CT-based screening systems deployed globally across:

• Airports
• Border control
• Critical infrastructure

These systems operate in regulated, high-security environments where failures have real-world consequences.

You’re not just building pipelines—you’re protecting national infrastructure at scale
.

• Build and maintain Ansible-based hardening frameworks (DISA STIG, OpenSCAP)
• Engineer secure CI/CD pipelines with enforced security gates
• Create container-based OS images that pass compliance pre-deployment
• Develop Terraform-managed security infrastructure (Tenable, Open Search, Grafana)
• Automate vulnerability remediation pipelines
• Replace manual audit prep with continuous compliance and auto-generated evidence
• Map technical controls directly to ISO 27001 requirements

• Ansible, Terraform, Git Lab CI/CD
• Linux (RHEL/CentOS ecosystem)
• Containers (Docker/Podman, image pipelines)
• Vulnerability scanning (Tenable/Nessus/OpenVAS)
• OpenSCAP, STIG, CIS benchmarks
• Open Search / Grafana

• Experience in Dev Ops, SRE, or security engineering
• Strong automation mindset—you eliminate manual processes
• Hands-on with infrastructure-as-code and CI/CD pipelines
• Comfortable working in Linux-heavy, production environments
• Experience (or strong interest) in security automation and compliance engineering

• Greenfield opportunity – build systems from scratch, not maintain legacy
• Engineering-first security – automation over documentation
• Real-world impact – security that protects global infrastructure
• Cross-functional influence – partner with engineering, cybersecurity, and platform teams
• Modern stack – CI/CD, containers, IaC, and compliance automation