Lead DevSecOps Engineer Jobs

Lead DevSecOps Engineer

STR’s Analytics Division develops novel solutions to the most challenging nation...

Location

United States , Woburn

Salary:

184000.00 - 254000.00 USD / Year

STR

Expiration Date

Until further notice

Requirements

Active secret clearance
U.S. citizenship
BS, MS, or PhD in Computer Science, Information Technology, or related technical field
Minimum of 5-7+ years relevant experience
Experience with CI/CD tools (Gitlab) and pipeline automation
Experience with cloud platforms (such as AWS, Azure, or Google Cloud)
Experience with automated provisioning tools (such as Ansible, Chef, TerraForm)
Experience with containerization technologies such as Docker and Podman
Experience with Kubernetes management solutions such as EKS and Rancher
Experience deploying and monitoring Kubernetes clusters and pod configurations

Job Responsibility

Work as part of tightly knit Agile software teams to design and implement Continuous Integration/ Continuous Deployment (CI/CD) pipelines utilizing GitLab or other CI/CD systems
Supporting Amazon Web Services (AWS) toolsets in an unclassified environment
Maintaining multiple CI/CD environments at multiple classification levels where AWS is not available
Configuring CI/CD environments for application performance, security monitoring, and alerting
Acting as a point person with the corporate IT organization to ensure that infrastructure toolsets are configured, maintained, reliable, and in compliance with Department of Defense standards
Advocating for and educating engineers on DevOps fundamentals while helping to implement solid software development processes

What we offer

Flexible, hybrid environment
Collaborative learning environment

Fulltime

Senior Backend Lead Engineer

Senior engineer role focused on building application security cloud solutions at...

Location

Israel , Tel Aviv

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Hands-on experience developing high-performance solutions following Agile methodologies
Backend Java experience
Expertise in cloud engineering and application security
Familiarity with GoLang, Node.js UI authentication
Good understanding of security capabilities supporting application development (authentication, authorization, credential management, certificate management, encryption)
Understanding of container orchestration technologies
Containers K8s hands-on experience
Experience in building end-to-end solutions for the cloud domain in a secure manner
Ability to write documentation in a diligent manner and lead elements in projects independently

Job Responsibility

Technical engineer working with key stakeholders of cloud engineering and application security experts
Explore and resolve key application security gaps and drive their resolutions
Develop modules that resolve identified gaps in a centralized optimized manner (credential management, authentication, authorization, end-to-end scanning tools)
Act as an advisor and expert lead to various development teams across the company to help them improve their expertise within cloud engineering and application security
Driving delivery of platform capabilities within the cyber domain supporting application needs for on-prem and cloud environments

Fulltime

Senior DevSecOps Software Engineer

TapHere is looking for a self-starting, team-oriented Senior DevSecOps Software ...

Location

United States , Chantilly

Salary:

Not provided

TapHere! Technology

Expiration Date

Until further notice

Requirements

Active TS SCI with CI Poly Clearance
Bachelor’s degree in Information Systems, Computer Science, Software Engineering, or a related discipline and minimum 9 years of prior relevant experience. Graduate Degree and a minimum of 7 years of prior related experience. In lieu of a degree, minimum of 13 years of prior related experience
Security+ Certified
Experience with Kubernetes a must
Experience with configuration management tools such as like Puppet, Chef, and/or Ansible
Experience (Mid/Senior level) with Linux administration, preferably RHEL/CentOS 7 and 8
Experience with cloud technologies such as Amazon Web Services (AWS) or GovCloud

Job Responsibility

The Software Engineer participates in a team in implementing DevSecOps methodologies into an Agile software development environment
Collaborating and leading with other engineers to plan, design and develop the DevSecOps environment that includes cohesive CI/CD pipelines
Supporting the entire Software Development Lifecycle with an emphasis on build and release management via automation
Analyzing continuously the DevSecOps environment for technical and process improvements (e.g. integration of security measures, faster security and software updates, improved automation, reduced glitches, and software failures, etc.)
Maintaining the deployed system, deploying updates and fixes, investigating, and resolving technical and network issues, providing technical support to end-users as needed
Promoting DevSecOps as a team culture

Cloud Application Security Lead

Cloud Application security lead is a Senior VP engineer with hands-on experience...

Location

Israel , Tel Aviv

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Expertise of cloud engineering and application security, demonstrated by previous roles in the domain and industry certification
Good understanding of security capabilities supporting application development such as authentication, authorization, credential management, certificate management, encryption for on-prem and cloud
Understanding of container orchestration technologies
Hands-on experience developing high-performance solutions following Agile methodologies ideally backend Java experience
Containers K8s hands on experience understanding the lifecycle of a containers and integration with security boundaries-advantage
Experience in building end to end solutions for the cloud domain in a secure manner
Familiarity with Java required, advantage - GoLang, Node.js, authentication

Job Responsibility

Technical engineering leadership and hands on development working with key stakeholders of cloud engineering and application security experts
Explore and resolve key application security gaps and drive their resolutions
Develop modules that resolve identified gaps in a centralized optimized manner such as: credential mgmt, authentication, authorization, end to end scanning tools
Act as an advisor and expert lead to various development teams across the company, to help them improve their expertise within cloud engineering and application security

What we offer

Generous holiday allowance starting at 22 days
Private medical insurance packages
Employee Assistance Program

Fulltime

Vice President of Engineering

The Vice President of Engineering will be responsible for leading One Call’s pro...

Location

United States

Salary:

135700.00 - 278300.00 USD / Year

One Call

Expiration Date

Until further notice

Requirements

15+ years of progressive experience in engineering leadership roles with at least 4+ years serving as a VP-level leader
Proven track record of leading large-scale engineering transformations in high-growth or private equity environments
Deep expertise in modern software development, cloud-native architectures, agile delivery, and quality engineering
Experience managing organizations of 100+ people, including distributed teams and contractors
Hands-on experience with enterprise-scale applications across multiple business domains
Strong understanding of hybrid cloud environments, microservices architecture, and containerized deployments
Experience with CI/CD pipelines, automated testing frameworks, and DevSecOps practices
Strong financial acumen and vendor management experience
Exceptional communication, executive presence, and stakeholder engagement skills
Experience partnering with C-suite leaders and Boards on technology strategy and execution

Job Responsibility

Define and execute the engineering strategy aligned with One Call’s digital platform vision and care coordination objectives
Serve as a key partner to the CTO and Product leadership in roadmap planning, platform architecture, business impact delivery and driving innovation through technology at One Call
Drive the implementation of AI-driven capabilities across our development processes and products to accelerate delivery, improve quality and drive step change business impact
Champion a culture of speed, accountability, and continuous improvement across engineering
Lead all software development teams across multiple domains, ensuring alignment with business priorities and product roadmaps
Oversee Quality Engineering, driving automation, continuous testing, and reliability across the SDLC
Implement modern engineering practices including CI/CD, DevSecOps, and agile methodologies to accelerate time-to-impact
Drive modernization of legacy systems and reduction of technical debt through architectural improvements and platform investments
Establish engineering standards, reusable frameworks, and scalable design patterns that support long-term growth
Partner with Enterprise Architecture and Data teams to ensure cohesive platform strategy and interoperability

What we offer

Remote Work: We are a remote-first company, and almost all positions receive the flexibility of working from home
Generous Time Off: Besides 8 company holidays and 2 personal days every year, all colleagues receive a minimum of 18 days of paid time off
Comprehensive Benefits Package: Including medical, dental, vision, and pet insurance
401(k) matching program
and company-paid life insurance and short and long-term disability coverage
Supportive Services: We offer a Colleague Assistance Program that provides free counseling and financial services, and our One Call Foundation, a non-profit arm of our company, provides colleagues financial assistance during times of unexpected hardships

Fulltime

Security Engineer

As a Security Engineer, you’ll play a key role in shaping the security and resil...

Location

France , Aix en Provence

Salary:

Not provided

Voyage PrivÃ©

Expiration Date

Until further notice

Requirements

5–7 years of experience in software engineering, security engineering, DevSecOps, or equivalent technical security roles
Strong development background (Python, Node.js, Java, Go, PhP or similar)
Hands-on experience with modern CI/CD systems (GitHub Actions, GitLab, Jenkins)
Solid understanding of cloud security principles (AWS, GCP, Azure)
Experience securing both virtualized systems (VMs) and containerized workloads
Strong knowledge of secure coding, OWASP Top 10, and application security fundamentals
Experience with SAST, SCA, container/IaC scanning, runtime security tools, IAM, and secrets management
Pragmatic, engineering-first mindset: able to balance security with developer experience, velocity, and real-world constraints
Excellent communication skills: able to translate complex security issues into actionable guidance for both technical and non-technical stakeholders
Proactive, autonomous, critical thinker with a continuous improvement mindset

Job Responsibility

Strengthen the security posture across products and infrastructure: secure coding practices, code reviews, threat modeling, vulnerability remediation, cloud, and network hardening
Develop automated security guardrails integrated into CI/CD pipelines (SAST, SCA, secrets scanning)
Design secure architectures for applications, APIs, data flows, and integrations in partnership with engineering teams
Secure hybrid environments combining virtual machines, containerized workloads, and cloud-native services, ensuring consistent security standards across the entire platform
Drive proactive risk identification through continuous scanning, threat modeling sessions, risk assessments, and architecture reviews
Enable engineering teams to build secure-by-design practices by acting as a trusted advisor, developing internal tools, and leading security awareness sessions
Operational security & incident readiness: participate in on-call rotations, investigate security events, and improve incident response workflows
Lead security improvement projects: build automation, enhance tools, optimize processes, and foster a culture of security ownership

What we offer

Access our large on-site fitness center morning, noon, and night
Private padel court
Company Breaks, Carnival, Annual Convention, meetups and talks
Free tickets to every Provence Rugby home match and live music nights at the Dalida Institute
Up to 20% off our exclusive getaway offers

Fulltime

Principal Security Engineer

We’re building a world-class global Security team as part of our Trust Program. ...

Location

India , Hyderabad

Salary:

Not provided

Highspot

Expiration Date

Until further notice

Requirements

10+ years of robust, progressive experience in security engineering, application security, DevSecOps, incident detection and response, or closely related fields
Advanced proficiency in at least one programming language (Python, Ruby, Go, Rust, JavaScript), with deep experience conducting detailed code reviews and security assessments across multiple languages
Hands-on experience with deploying, operating, and interpreting results from security tools such as static analyzers, web vulnerability scanners, supply chain analysis scanners, and host-based intrusion detection systems
Demonstrated experience mentoring, coaching and guiding junior and mid-level security engineers, contributing to a strong team culture, and supporting peer development as a senior individual contributor
Demonstrated proactive approach, strong continuous learning orientation, and curiosity about emerging threats, security trends, and innovative technologies
Extensive expertise securing cloud-native environments (AWS, Azure, GCP, containers, microservices), with in-depth knowledge of modern cloud security risks and defenses
Demonstrated ability to embrace being wrong, practice humility, continuously learn from experiences, and actively seek insights through thoughtful questioning and collaboration

Job Responsibility

Lead comprehensive application security assessments, advanced threat modeling sessions, and secure code reviews across critical product features, internal tooling, endpoints, and third-party integrations
Collaborate strategically with product engineering to establish and enhance secure-by-default and privacy-by-design practices within the software development lifecycle (SDLC)
Lead and otherwise participate in incident detection, investigation, triage, containment, and root cause analysis for high impact security incidents, providing mentorship and guidance to junior engineers as required
Drive the development and continuous improvement of sophisticated detection rules, response automation, and optimized alert management across cloud environments, corporate infrastructure, and SaaS platforms
Lead and participate in complex vulnerability remediation processes, and effectively respond to security issues discovered by both internal teams and external sources
Document technical findings and strategic decisions in a clear and accessible manner, and procedural enhancements
significantly contribute to comprehensive security playbooks and knowledge repositories
Manage and oversee asksecurity@ request handling, and actively participate in sprint-based security activities, balancing strategic and tactical execution
Actively participate in the security on-call rotation, or provide senior-level guidance as required during an event and aid in rapid response capabilities to protect our 24x7 platform and global workforce

Fulltime

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Melbourne; Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Lead DevSecOps Engineer

STR

Location:
United States , Arlington

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 12, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead DevSecOps Engineer