DevSecOps Engineer

Come build, innovate, disrupt, and thrive!

KēSTA I.T. is actively seeking a Sr. Dev Sec Ops  Engineer for an immediate opportunity with our industry leading client.

Are you on the lookout for a unique career opportunity that offers leadership, responsibility, and the chance to make a significant impact? If you're eager to contribute to a thriving and stable organization while maintaining your confidentiality, continue reading.

A Dev Sec Ops  Engineer is responsible for embedding, auditing, and enforcing security practices across the entire software development lifecycle within modern Dev Ops and cloud environments. This role focuses on integrating security controls into CI/CD pipelines, development tooling, and engineering workflows to enable secure-by-design software delivery at scale.

This position partners closely with engineering and platform teams to design, implement, and enforce security controls across cloud infrastructure, application platforms, and automation pipelines. The role also supports foundational security operations, including vulnerability management and incident response, ensuring consistent security standards and improved threat visibility across the organization.

• Integrate and enforce security controls throughout the software development lifecycle by embedding automated tools (e.g., SAST, DAST, SCA, secrets detection, IaC scanning) into CI/CD pipelines and Dev Ops workflows
• Partner with development and platform teams to identify and remediate vulnerabilities early in the development process while maintaining delivery speed and efficiency
• Design, implement, and maintain scalable security controls across cloud and application environments to support compliance and security standards
• Enhance visibility and threat detection through centralized logging, monitoring, and alerting solutions to proactively identify risks and anomalies
• Develop and improve processes supporting security frameworks, including vulnerability management, risk assessment, and remediation tracking
• Conduct regular vulnerability scanning across cloud and on‑premises environments, prioritizing risks based on severity, exploitability, and business impact
• Coordinate remediation efforts with internal teams and external partners to ensure timely risk reduction
• Serve as a primary responder for security incidents, including alert triage, containment, root cause analysis, and reporting
• Investigate potential security events or violations, document findings, and recommend improvements to strengthen overall security posture

• High school diploma or equivalent required
• Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field (or equivalent experience) preferred
• 5+ years of experience in IT security
• 3+ years of experience in Dev Ops engineering or related disciplines

• Experience with CI/CD platforms and source control tools (e.g., Git Hub, Azure Dev Ops or similar)
• Experience with containerization and orchestration technologies (e.g., Kubernetes, Docker)
• Hands‑on experience with application security testing tools (e.g., SAST, DAST, SCA)
• Experience in security incident management, response, and reporting
• Experience with vulnerability management and remediation processes

• Relevant certifications such as CISSP, CASP+ (SecurityX), GCIH, or similar
• Strong verbal and written communication skills
• Strong analytical, troubleshooting, and problem‑solving abilities
• Ability to plan, organize, and manage multiple priorities effectively