Senior DevSecOps Engineer
Seeking a Senior DevSecOps Engineer to own and improve the security posture of a SaaS threat detection platform. Responsibilities include security architecture, threat modeling, embedding security in CI/CD and infrastructure, incident response, and compliance. Requires strong experience with AWS, Kubernetes, Terraform, Python, and security tooling.
Responsibilities
- Own and improve overall security posture, including risk assessment and long-term planning.
- Design and guide secure architectures for new and existing systems.
- Lead threat modeling and proactive validation against emerging attack techniques.
- Embed security across the development lifecycle, CI/CD pipelines, and infrastructure.
- Enhance logging, auditing, and detection capabilities.
- Own and optimize security tooling.
- Investigate and respond to security incidents and alerts.
- Perform root cause analysis and drive improvements.
- Collaborate with R&D, IT, Product, and CISO on secure design and operations.
- Support compliance initiatives and security reviews with internal and external stakeholders.
- Promote security awareness across the organization.
- Secure emerging technologies, including agentic AI systems.
Requirements
- 5+ years of experience in DevSecOps, Security Engineering, or related roles.
- Experience in a cybersecurity company or security-focused organization.
- Strong hands-on experience with AWS.
- Experience with Kubernetes, Docker, and Linux-based systems.
- Proven experience integrating security into SaaS SDLC.
- Experience with monitoring and observability tools.
- Experience with Infrastructure as Code (Terraform, Pulumi, or similar).
- Proficiency in scripting and automation with Python and/or Bash.
- Familiarity with security and IT platforms (logging, monitoring, detection).
- Understanding of security principles, threat modeling, and frameworks (NIST-CSF, CIS, SOC2, MITRE ATT&CK).
- Ability to operate independently and drive initiatives end-to-end.
- Excellent communication skills, effective during high-pressure incidents.
Nice to have
- Hands-on experience with databases like PostgreSQL, Snowflake, Elasticsearch, or Redis.
- Background in DevOps / Platform Engineering.
- Experience in consulting or customer-facing environments.