Sr DevSecOps Engineer
USA-CO Lafayette Bldg 2, United States
USD 124K-187K Senior-level Full Time
Tasks
- Define and own DevSecOps architecture roadmap for embedded platforms
- Define platform OS and BSP maintenance strategies Linux kernel support Yocto release planning driver updates patchability security update governance
- Define runtime security monitoring and post market vulnerability response workflows
- Develop and maintain secure embedded Linux distributions Yocto BSP drivers hypervisors
- Establish software supply chain practices SBOM component tracking vulnerability monitoring end of support remediation
- Evaluate security tooling with vendors and partners including vulnerability intelligence penetration testing outputs
- Implement secure boot firmware signing cryptographic configuration key certificate lifecycle secure update mechanisms secure communication
- Implement secure embedded platform build infrastructure
- Manage CVE intake enrichment asset mapping triage risk scoring remediation validation reporting
- Partner with product teams to deliver reusable secure testable scalable platform capabilities
- Perform threat modeling cybersecurity risk analysis attack surface analysis exploitability assessment security controls traceability
- Prepare cybersecurity software lifecycle DevSecOps evidence for regulatory submissions audits
- Provide technical leadership and mentoring on secure coding build automation vulnerability handling
- Support incident response and cybersecurity anomaly review
Perks/Benefits
- N/A
Skills/Tech-stack
Artifact signing | Atlassian Bamboo | Atlassian Bitbucket | Atlassian Jira | Authenticated update | BSP | Bash | Bootloader | CI/CD | CVE triage | Certificate Lifecycle Management | Certificate lifecycle | Composition analysis | Confluence | Cryptography | DevSecOps | Device Drivers | Docker | Embedded Linux | Firmware signing | GitHub | GitLab | Go | Hypervisor | Key Management | Lifecycle Management | Linux Kernel | Provenance tracking | Python | SAST | SBOM | SCA | Secure Update | Secure boot | Secure firmware | Security Automation | Snyk | Software Composition | Software Composition Analysis | Software Supply Chain | Software supply chain security | SonarQube | Static Analysis | Supply chain security | Threat modeling | Vulnerability Management | Vulnerability intelligence | Yocto project
Education
Roles
Related jobs
-
Microsoft Modern Work Engineer USD 93K-149KActive Directory | Conditional Access | Entra ID | Group Policy | Group Policy ObjectsClient facing professional services | Remote eligibleMid-level Full TimeREMOTE, United States R7h ago
-
.NET | 800-53 | API Security | AWS | Application FirewallHybrid work | Public Trust Tier 2 clearance required after onboardingMid-level ContractWashington, United States8h ago
-
800-53 | 802.1x | Cause analysis | Change Control | Cisco IOSHybrid work | Public Trust Tier 2 clearance sponsorshipMid-level ContractWashington, United States8h ago
-
Mid-level Full TimeHuntsville, Alabama, United States10h ago
-
AIX | AWS | Azure | Backup and Recovery | Budget controlsMid-level Full TimeBaltimore, Maryland, United States10h ago
-
Project Cyber Engineer USD 95K-159KAccess Management | Cloud Security | Cybersecurity | Identity and Access Management | Identity and accessMid-level Full TimeColorado Springs, Colorado, United States10h ago
-
Access Control | Access Control Lists | Alert analysis | Coverage Validation | Detection Coverage ValidationOnsite work | Travel opportunitiesMid-level Full TimeArlington/Rosslyn, Virginia, United States10h ago
-
Project- Platform Software Engineer USD 95K-159KAWS GovCloud | Accreditation | Agile | Ansible | AuthenticationMid-level Full TimeColorado Springs, Colorado, United States10h ago
-
Azure Resource | Azure Resource Manager | Backup and Recovery | Business Continuity | Cloud SecurityOn-call rotation | On-site work scheduleSenior-level Full TimeArlington/Rosslyn, Virginia, United States10h ago
-
AI Security Analyst | Camden Corporate Office USD 128K-237KAI/ML | Access Control | Application Firewall | Automation | AzureDisaster recovery exercise support | Off-hours support | Periodic travelSenior-level Full TimeHouston, TX, United States17h ago
-
Senior Corporate Security Engineer USD 180K-240KAPI Integration | AWS | Access Control | Access Management | AtlassianSenior-level Full TimeRemote, United States R20h ago
-
Senior Corporate Security Engineer USD 180K-240KAWS | Access Control | Access Management | Bash | Cloud SecurityAutomation focus | Continuous improvement culture | Ownership and measurable outcomes | Remote work optionSenior-level Full TimeRemote, United States R20h ago
-
Product Security Engineer USD 208K-312KAPI Security | Access Control | Advanced Security | Authentication & Authorization | Bug BountyMid-level Full TimeRemote - United States R20h ago
-
Security Engineer, Cloud USD 208K-312KAWS | AWS IAM | AWS Security | Access Management | CI/CDEvent support | Flexible time off | Healthcare | Mentorship | Remote workSenior-level Full TimeRemote - United States R20h ago
-
Network Systems Development & Integration Engineer USD 105K-135KActive Directory | Ansible | Aruba networking | Backup and Recovery | Cisco401k with company match | Company paid life and AD and D | Company paid short term and long term disability | Flexible Spending and HSA Accounts | Medical, dental, and vision benefitsMid-level Full TimeNewport, RI, US21h ago
-
Systems Engineer III USD 130K-161KAtlassian Confluence | Atlassian Jira | Cameo | DOD 8140 | DOD 8570Senior-level Full TimeFort Meade, MD21h ago
-
Application Engineer III USD 110K-160KAWS | AWS CLI | AWS Console | AWS Lambda | Amazon EC224 7 watchfloor shift scheduleSenior-level Full TimeFort Meade, MD21h ago
-
Forward Deployed Engineer - Security Clearance Required USD 170K-200KAzure DevOps | Bitbucket | CI/CD | Cloud infrastructure | ContainerizationEmployee assistance program | Flexible PTO | Home office stipend | Internal mobility | Learning and development stipendMid-level Full TimeTampa, FL - Hybrid R22h ago
-
Sr DevSecOps Engineer USD 124K-187KApplication Security Testing | Artifact signing | Atlassian Bamboo | Atlassian Bitbucket | Atlassian ConfluenceSenior-level Full TimeUSA-CO Lafayette Bldg 2, United States22h ago
-
AI Security Operations Engineer USD 136K-204KAI Governance | AI Security | AWS | Agentic AI | AutomationHealth benefits | Paid Holidays | Paid leaves | Paid vacation | Retirement contribution 401k planSenior-level Full TimeUS - Gaithersburg - MD, United …22h ago
-
VP Security Guardian, Product Security USD 120K-202KAI Security | Access Management | Agentic AI | Agentic AI security | Application Security401k match | Dental insurance | Employee assistance program | Employee networks | Flexible work/life supportExecutive-level Full TimeQuincy, Massachusetts, United States22h ago
-
Engineer IV, Cybersecurity USD 180K-205KAWS | Access Management | Artificial Intelligence | Azure | DevSecOps401k match | Dental insurance | Disability insurance | Life insurance | Medical insuranceSenior-level Full TimeMD - Gaither Rd., Rockville Corp …22h ago
-
Virtru Security Engineer USD 99K-225KAnsible | CI/CD | Cloud Security | Compliance validation | Data ClassificationDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, IL, Scott AFB (W Martin …22h ago
-
Sr. Backend Engineer (Hybrid, NYC) USD 140K-215KAWS Cloud | CI/CD | Cassandra | Distributed Systems | FlinkEmployee wellness programs | Hybrid work | Paid adoption leave | Paid parental leave | Paid time offSenior-level Full TimeUSA NY Remote, United States R22h ago
-
Sr. Backend Engineer II (Hybrid) USD 160K-250KAWS | CI/CD | Cassandra | Data Streaming | Distributed SystemsHybrid work | Paid adoption leave | Paid parental leave | Paid time off | Professional development opportunitiesMid-level Full TimeUSA NY Remote, United States R22h ago