DevSecOps Engineer

ABOUT US:
Kestra Holdings offers industry-leading wealth management platforms for independent wealth management professionals nationwide. With an innovative culture that celebrates independence, the company seeks to redefine the future of the advisory industry through superior service, cutting-edge technology, and preeminent resources that every financial professional needs to succeed in the market now and in the years to come.
Kestra Holdings companies collectively oversee $123 billion in assets under administration (AUA) and support more than 2,400+ independent financial professionals across the country in delivering comprehensive securities, trust, and investment advisory services to their clients. Located in the “Silicon Hills” of Austin, Texas, Kestra Holdings offers an experience as unique as the city in which it operates.


The DevSecOps Engineer will be pivotal in integrating security into our development and operations processes. As an expert in development and security, the ideal candidate will foster a culture of shared security responsibility across the entire organization. This position requires a balance of security know-how and hands-on DevOps experience.
Key Responsibilities
• Secure Software Development: Ensure security measures are embedded throughout the development lifecycle.
• Tool Management: Manage security tools and solutions.
• Security Assessments: Perform regular security assessments, code reviews, and penetration tests.
• Automation: Integrate security tools, standards, and processes into the CI/CD pipeline and KPI reporting.
• Collaboration: Partner closely with IT and development teams to ensure secure architectural designs and to address secruity concerns.
• Training & Culture: Advocate for a strong security culture and provide development teams with training and resources to help them build secure applications from the start.
• Documentation: Maintain DevSecOps and secure software development documentation to ensure accuracy.
• Continuous Learning: Stay updated with security trends, vulnerabilities, and best practices.
Minimum Qualifications
• Bachelor's degree in Computer Science, IT, or related field.
• 2+ years of proven experience in a DevSecOps role.
• Hands-on experience with CI/CD tools and integrating security into DevOps processes.
• Proficiency in Python and basic Javascript, Bash, Powershell, and C# knowledge.


INTERNAL APPLICANT POLICY:
Internal applicants must be in good standing and have a minimum of 1 year of service with Kestra. Internal applicants must also have a minimum of 1 year service in current role unless approved by EVP.

BENEFITS:
Full health, vision, dental. 401(k) plans along with a host of voluntary plans such as car insurance, legal services and more.
DISCLOSURE
By applying to a job at Kestra Financial, Inc., you are agreeing to the following statements:
• You acknowledge that if hired, Kestra Financial, Inc. may, obtain and use background information concerning your credit, character, general reputation, personal characteristics, work habits, performance and experience for evaluation for your potential employment.
• It is the policy of Kestra Financial to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, sex, sexual orientation, gender, identity or expression, age, disability, marital status, citizenship, national origin, genetic information, or any other characteristic protected by law. Kestra Financial prohibits any such discrimination or harassment.


KESTRA VALUES:

Our Mission is Powering Financial Independence, enabling the growth and success of investing clients and the advisors who serve them. We do that by living our values: SERVE, MAKE IT HAPPEN, and ONE TEAM.