Senior DevSecOps Engineer | 100% Remote

The hiring company is confidential. The Senior DevSecOps Engineer will strengthen application security and secure software delivery by integrating security automation and AI-assisted analysis into CI/CD pipelines and the SDLC.

Responsibilities:

• Perform advanced application security analysis using AI-assisted security tools, SAST, SCA, dependency analysis, and software supply chain security solutions
• Partner with application teams to implement secure software delivery practices and embed security throughout the SDLC
• Develop and automate security controls, policies, quality gates, and remediation workflows within CI/CD pipelines to enable secure and compliant software delivery
• Leverage AI-powered tools and coding assistants to identify vulnerabilities, generate remediation recommendations, and accelerate code remediation efforts
• Analyze and prioritize security findings, working with development teams to reduce risk and improve application security posture
• Evaluate and implement emerging AI-driven security capabilities and automation solutions to strengthen enterprise security and improve developer productivity

Requirements:

• Strong hands-on DevSecOps experience
• Advanced SAST/SCA and vulnerability management
• Software supply chain and container/image security
• CI/CD security integration and automation
• GitHub/GitHub Advanced Security experience
• AI-assisted security/vulnerability analysis experience
• Strong scripting and automation background
• 10+ years of experience in DevOps, DevSecOps, Application Security, Secure Software Engineering, or a related field
• Expert knowledge of application security, vulnerability management, security assessments, and software supply chain security, including SAST, SCA, DAST, dependency analysis, and secure coding practices
• Hands-on experience leveraging AI technologies, including LLMs, MCP servers, AI Skills, AI Agents, and code assistants such as Claude Code, GitHub Copilot, Codex, Antigravity, or similar platforms for security analysis, vulnerability remediation, and developer productivity
• Experience with security tools such as SonarQube, Sonatype Nexus IQ, GitHub Advanced Security, HCL AppScan, Prisma, Qualys, or similar application security platforms
• Experience developing and implementing secure CI/CD pipelines and automation using GitHub, GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build, or similar technologies
• Strong understanding of SDLC, DevSecOps principles, security controls, and modern application security best practices
• Experience partnering with application development teams to remediate vulnerabilities, implement security controls, and improve overall security posture