Associate Technical Lead, DevSecOps

• 4–5 years of experience in DevSecOps, Application Security, Security Engineering, or related roles, with at least 2+ years in a lead or senior technical role.
• Proven experience leading and mentoring security or DevOps engineering teams.
• Expert-level hands-on experience with Checkmarx One (SAST) or equivalent enterprise SAST platforms.
• Deep experience with DAST tools such as Burp Suite, OWASP ZAP, or commercial alternatives.
• Extensive experience architecting and integrating security tools into Jenkins, GitLab CI, Azure DevOps, or GitHub Actions at enterprise scale.
• Strong expertise in container security, Kubernetes security, and API security.
• Hands-on experience designing and implementing secrets management solutions (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Expert understanding of Secure SDLC, OWASP Top 10, SANS Top 25, and enterprise vulnerability management practices.
• Deep experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security controls.
• Advanced Infrastructure as Code experience using Terraform, CloudFormation, Pulumi, or Ansible.
• Strong experience with Docker, Kubernetes, Helm, and service mesh technologies.
• Proficiency with observability and monitoring tools (Prometheus, Grafana, ELK, Splunk).
• Strong scripting and automation skills in Python, Bash, Go, or PowerShell.
• Experience driving security initiatives in Agile/Scrum and SAFe environments.
• Experience with threat modeling and secure architecture reviews.

• Master’s degree with 4–5 years of relevant experience, or Bachelor’s degree with 6–8 years of experience.
• Security certifications such as CISSP, CCSP, OSCP, GWAPT, GWEB, or cloud security specialty certifications (AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Cloud or DevOps certifications (CKS, CKA, AWS DevOps Professional, Azure DevOps Engineer Expert).
• Experience with container and API security platforms (Aqua, Prisma Cloud, Sysdig, Snyk).
• Experience with SIEM platforms (Splunk, Sentinel, Chronicle) and security orchestration (SOAR).
• Experience with zero trust architecture and identity-based security models.
• Background in penetration testing or red team activities.
• Experience presenting to and influencing executive leadership on security strategy and risk.

• Strong leadership presence with the ability to influence and drive change across teams and organizational boundaries.
• Excellent strategic thinking and problem-solving abilities.
• Outstanding communication skills with the ability to articulate complex security concepts to technical and non-technical stakeholders.
• Proven ability to mentor and develop talent.
• Collaborative mindset with experience working in fast-paced, high-growth environments.
• Ownership mentality with a focus on quality, security, and continuous improvement.
• Ability to balance security requirements with business objectives and delivery timelines.

Doctorate (Academic) Degree and 0 years related work experience; Master's Level Degree and related work experience of 3 years; Bachelor's Level Degree and related work experience of 5 years

We offer a competitive, family friendly total rewards package.

We design our programs to reflect our commitment to an inclusive environment, while ensuring we provide benefits that meet the diverse needs of our employees.

KLA is proud to be an equal opportunity employer

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees.

KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment.

Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA.

Please ensure that you have searched KLA’s Careers website for legitimate job postings.

KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers.

If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee.

We take your privacy very seriously and confidentially handle your information.