Senior DevOps Engineer

RIT Solutions is recruiting for a confidential client seeking a Senior DevOps Engineer focused on DevSecOps and AI-assisted security. The role strengthens secure software delivery by embedding application security into CI/CD pipelines, partnering with application teams, and using AI-powered tools to identify and remediate vulnerabilities.

Responsibilities:

• Perform advanced application security analysis using AI-assisted security tools, SAST, SCA, dependency analysis, and software supply chain security solutions
• Partner with application teams to implement secure software delivery practices and embed security throughout the SDLC
• Develop and automate security controls, policies, quality gates, and remediation workflows within CI/CD pipelines to enable secure and compliant software delivery
• Leverage AI-powered tools and coding assistants to identify vulnerabilities, generate remediation recommendations, and accelerate code remediation efforts
• Analyze and prioritize security findings, working with development teams to reduce risk and improve application security posture
• Evaluate and implement emerging AI-driven security capabilities and automation solutions to strengthen enterprise security and improve developer productivity

Requirements:

• 10+ years of experience in DevOps, DevSecOps, Application Security, Secure Software Engineering, or a related field
• Expert knowledge of application security, vulnerability management, security assessments, and software supply chain security, including SAST, SCA, DAST, dependency analysis, and secure coding practices
• Hands-on experience leveraging AI technologies, including LLMs, MCP servers, AI Skills, AI Agents, and code assistants such as Claude Code, GitHub Copilot, Codex, Antigravity, or similar platforms for security analysis, vulnerability remediation, and developer productivity
• Experience with security tools such as SonarQube, Sonatype Nexus IQ, GitHub Advanced Security, HCL AppScan, Prisma, Qualys, or similar application security platforms
• Experience developing and implementing secure CI/CD pipelines and automation using GitHub, GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build, or similar technologies
• Strong understanding of SDLC, DevSecOps principles, security controls, and modern application security best practices
• Experience partnering with application development teams to remediate vulnerabilities, implement security controls, and improve overall security posture