Senior DevSecOps Engineer

Panopto is a customer-centric learning technology company that provides a video knowledge management platform for organizations. The Senior DevSecOps Engineer will own the platform’s security posture by embedding automated security controls into development lifecycles and CI/CD pipelines, securing cloud and container infrastructure, implementing compliance guardrails, leveraging AI security tools, leading incident response, and mentoring engineering teams.

Responsibilities:

• Design Secure Systems: Lead hands-on threat modeling assessments on new features across many different AWS services, ensuring security is baked into application design from the first line of code
• Drive Proactive Defense & CI/CD Security: Build, maintain, and enforce automated static (SAST), dynamic (DAST), and dependency (SCA) security testing frameworks within our AWS delivery pipelines to catch vulnerabilities before code reaches production
• Secure Cloud & Container Infrastructure: Design and manage security guardrails across AWS environments, Kubernetes clusters, Docker containers, and CloudFormation/CDK/Terraform Infrastructure-as-Code (IaC) deployments
• Own Policy & Automated Governance: Lead the technical implementation of policy-as-code and compliance guardrails (ISO 27001, SOC 2, TX-RAMP), translating complex regulatory requirements into simple, actionable engineering standards
• Leverage AI Security Tools: Evaluate and integrate AI-assisted tools to accelerate code reviews, log analysis, and vulnerability triage, while establishing secure usage guidelines for developer AI tools
• Lead Incident Response: Act with ownership during security events by conducting investigations and root-cause analysis, using collective wisdom to prevent future incidents
• Mentor Engineering Teams: Coach developers on secure coding practices, threat identification, and vulnerability remediation through practical mentorship and reusable design patterns

Requirements:

• Proven track record securing Multi-Account AWS environments and Infrastructure-as-Code deployments (IAM/Identity Center, Network Security, Encryption, Docker/ECS/Fargate, Terraform, CloudFormation/CDK, Security Hub, GuardDuty)
• Strong hands-on experience integrating security tools into CI/CD pipelines and writing automation scripts using Python or Bash
• Demonstrated experience using AI tools (such as automated code reviewers, LLM tools, or AI-driven security scanners)
• In addition, experience securing AI systems, AI supply chinese, and AI-assisted workflows
• Proven ability to evaluate application architectures for security flaws and guide teams on mitigating OWASP Top 10 vulnerabilities
• Understanding that security must support business velocity, with experience turning compliance requirements into automated checks without slowing down software releases
• 7+ years in security engineering, DevSecOps, software development, or cloud infrastructure security
• Security or cloud certifications such as CISSP, AWS Certified Security - Specialty, or Certified Kubernetes Security Specialist (CKS)
• Experience securing video streaming architectures or high-scale backend services
• Experience implementing policy-as-code frameworks in regulated SaaS environments