Source Job

Global

  • Embed security scanning into CI/CD pipelines across code, dependencies, containers, IaC, and secrets.
  • Secure containerized workloads and deployment environments on AWS and GCP with least-privilege access.
  • Own DevSecOps implementation for SC TRM and BNM RMiT, including evidence, testing, and audit support.

AWS GCP Kubernetes CI/CD Python

20 jobs similar to DevSecOps Engineer

Jobs ranked by similarity.

Brazil 6w PTO

  • Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
  • Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
  • Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.

The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.

Brazil

  • Integrate security controls into CI/CD pipelines, including SAST, SCA, and container scanning.
  • Lead vulnerability management and governance with risk-based prioritization and remediation.
  • Design and implement security controls across GCP infrastructure using IaC practices.

The company is a technology firm specializing in cloud-native security solutions. It operates with a globally distributed team and emphasizes a flexible, autonomous working culture.

EU

  • Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
  • Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
  • Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.

Redcare Pharmacy is Europe's leading online pharmacy, driven by dedicated teams and cutting-edge innovation. The company fosters an enjoyable and collaborative working environment where every employee feels comfortable and motivated to contribute to the vision: 'Until every human has their health.'

Spain EU Latam

  • Design and operate secure, scalable cloud infrastructure on AWS/EKS.
  • Develop and maintain CI/CD pipelines and automated deployment processes.
  • Champion observability and SRE practices, including monitoring and performance improvements.

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they deliver future-ready solutions.

$120,000–$170,000/yr
US

  • Own and improve WellBeam's AWS infrastructure, delivery pipelines, and production reliability with a security-first mindset.
  • Lead SOC 2 and HIPAA technical controls, vulnerability management, and security operations as the internal security lead.
  • Build observability, automate deployments, and strengthen backup, disaster recovery, and incident response across the platform.

WellBeam is a healthcare interoperability platform connecting health systems, physicians, and post-acute providers. It is a remote-first team offering flexible working hours, competitive compensation, and regular company offsites.

$124,750–$178,215/yr
US

  • Design, build, and maintain automation pipelines for workload packaging, validation, testing, deployment, and monitoring across AWS environments.
  • Collaborate with data engineers to operationalize workloads within a data lakehouse ecosystem and develop reusable infrastructure-as-code constructs using Terraform, AWS CDK, or CloudFormation.
  • Ensure pipelines meet enterprise security, compliance, and scalability standards while mentoring junior engineers and contributing to DevSecOps practices.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. The company uses AI to review applications and ensure fair, objective candidate evaluation, and operates in a distributed, fully remote environment.

$140,000–$160,000/yr
US Unlimited PTO

  • Support DoD cybersecurity requirements by integrating security controls, automation, and compliance into DevSecOps pipelines, tooling, and configurations.
  • Design, implement, and maintain automated security controls for CI/CD pipelines, including SAST, DAST, SCA, container scanning, and vulnerability management.
  • Collaborate with engineering teams to ensure secure software supply chain practices, including SBOMs, artifact signing, and automated compliance evidence collection.

Raft is a customer-obsessed non-traditional defense tech company dedicated to empowering U.S. military and government agencies with cutting-edge AI/ML and data solutions. We are a hyper-collaborative team that values innovation, diversity, and a culture of Ubuntu, where each member adds unique value.

Europe

  • Own cloud and product security across AWS and GCP, setting baselines for IAM, networking, data protection, and workload configuration.
  • Partner with platform, SRE, and product teams to embed practical security controls into developer workflows and automate guardrails in delivery pipelines.
  • Perform security architecture reviews, threat modeling, and incident response, and drive systemic improvements with meaningful security metrics.

We create intelligent software development tools used by more than 15 million users and 300,000 companies, including 88 of the Fortune Global Top 100. Our mission is to make development teams more productive and AI adoptable at scale, and we foster an open and inclusive workplace.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

US

  • Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
  • Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
  • Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.

$115,000–$140,000/yr
US

  • Perform systems administration, patching, vulnerability scanning, and remediation for AWS and GCP cloud workloads.
  • Configure and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
  • Support 24x7 on-call rotation and collaborate with security analysts to deliver secure solutions for FedRAMP and FISMA customers.

Quantum Sky is a technology company that engineers solutions for cyber, networks, software, and quantum for mission-driven clients. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

Latin America

  • Design and run Google Cloud infrastructure for new front-end and backend services.
  • Manage Cloudflare CDN, WAF, DNS, caching, edge security, and implement security posture.
  • Build and maintain CI/CD pipelines, Terraform, monitoring, and incident response.

Truelogic is a leading provider of nearshore staff augmentation services headquartered in New York, delivering technology solutions to startups and industry leaders. With 600+ tech professionals based in Latin America, it partners with U.S. companies on impactful projects and values career growth.

India

  • Securing and operating a global, customer-facing SaaS platform across cloud infrastructure, automation, and production operations.
  • Implementing security controls, audit evidence collection, and hardening infrastructure and container images.
  • Collaborating with engineering and cybersecurity teams to remediate vulnerabilities and improve platform resilience.

A company operating a global, customer-facing SaaS platform serving large enterprise customers. The environment is fast-paced, cloud-native, and collaborative across engineering teams.

US

  • Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
  • Design and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
  • Drive containerization, Kubernetes orchestration, and automated security compliance for mission-critical applications.

LMI is a digital solutions provider dedicated to accelerating government impact with innovation, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.

$150,000–$200,000/yr
Global Unlimited PTO

  • Design, implement, and manage cloud infrastructure and deployment pipelines.
  • Build automation tools for build, test, deployment, and infrastructure provisioning.
  • Mentor engineers and drive DevOps best practices for security, scalability, and reliability.

Accrete creates advanced AI solutions and autonomous agents that turn complex data into actionable insights for businesses and government organizations. The team is collaborative and innovative, focused on pushing the boundaries of AI technology.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

Global

  • Design and maintain security controls across AWS and GCP infrastructure and platform services.
  • Manage IAM, network segmentation, encryption, key management, monitoring, threat detection, and incident response.
  • Own SC TRM and BNM RMiT controls for cloud and infrastructure, including audit and remediation support.

BJAK is a mobile-first insurance platform and the leading insurance platform in Southeast Asia, helping people plan, save, and grow their money. With over 20 nationalities working globally, the team values passionate, driven people who love building next-generation financial applications.

$122,000–$211,000/yr
US

  • Design and maintain CI/CD pipelines for automated build, test, security scanning, and deployment.
  • Provision and manage cloud infrastructure across development, test, and production environments.
  • Deploy and support containerized applications using Docker and Kubernetes, including monitoring, troubleshooting, and incident response.

LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed. Headquartered in Tysons, Virginia, it serves the defense, space, healthcare, and energy sectors with a collaborative, agile culture.

France 4w paternity

  • Bridge security and platform engineering to make infrastructure secure by design and provable at audit.
  • Own infrastructure vulnerability management and automate security guardrails on Azure and Kubernetes.
  • Build detection as code, widen SIEM coverage, and eliminate long-lived credentials.

360Learning is a collaborative learning platform for turning internal experts into champions for employee, customer, and partner growth. Founded in 2013, it has 400+ employees across North America and EMEA with an inclusive Convexity culture.

  • Design and implement security-focused tooling and guardrails for infrastructure.
  • Collaborate with security, SRE, and platform teams to integrate trust principles.
  • Build internal automation to reduce developer cognitive load while enforcing security standards.

BlueCloud is a Snowflake Elite Partner that helps enterprises migrate to AI-ready data platforms. With 450+ consultants and 200+ successful transformations, they combine expertise with AI accelerators to deliver results 40-50% faster.