We are seeking a Senior DevSecOps Engineer (8–12 years of experience) with demonstrated technical leadership experience to lead security automation and tooling integration across projects .
This role will focus on embedding security controls into the software delivery lifecycles specifically SBOM generation and quality improvement, secret scanning, and SAST integration —and automating security report generation and publishing into platforms such as Dependency-Track and DefectDojo .
You will work closely with engineering, DevOps, and security stakeholders to drive adoption of secure-by-default practices, influence technical direction, and ensure scalable, repeatable, and measurable security automation through CI/CD pipelines.
You will also help raise the overall maturity of the program through mentorship, standards, and continuously improving documentation.
We are seeking a Senior DevSecOps Engineer (8–12 years of experience) with demonstrated technical leadership experience to lead security automation and tooling integration across projects . This role will focus on embedding security controls into the software delivery lifecycles specifically SBOM generation and quality improvement, secret scanning, and SAST integration —and automating security report generation and publishing into platforms such as Dependency-Track and DefectDojo .
You will work closely with engineering, DevOps, and security stakeholders to drive adoption of secure-by-default practices, influence technical direction, and ensure scalable, repeatable, and measurable security automation through CI/CD pipelines. You will also help raise the overall maturity of the program through mentorship, standards, and continuously improving documentation.
Key Responsibilities
Provide technical leadership for DevSecOps initiatives across MSD projects, including driving best practices, standardization, and adoption across teams.
Integrate and operationalize security tooling within MSD projects, including: SBOM generation and validation Secret scanning SAST (Static Application Security Testing)
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
Improve the quantity (coverage) and quality of generated SBOMs by defining standards, validation gates, and measurable KPIs (e.g., completeness, dependency accuracy, license metadata, component version resolution).
Design and maintain CI/CD automation to generate security reports and automatically publish results to: Dependency-Track (SBOM ingestion / component risk analysis) DefectDojo (centralized vulnerability management / reporting)
Build and maintain “security as code” patterns (pipeline templates, reusable scripts, standardized configs) to enable broad adoption across multiple repositories/teams.
Mentor engineers and partners with development teams to improve remediation workflows by tuning rulesets, improving signal-to-noise, and ensuring findings are actionable.
Establish secure and scalable practices for credential handling in pipelines (least privilege, secret management patterns, rotation support).
Lead or contribute to cross-functional working groups with Security, DevOps, and Engineering to align on standards, prioritization, and measurable outcomes.
Create, maintain, and continuously improve documentation (runbooks, onboarding guides, troubleshooting, reference architecture) to support platform adoption.
Provide operational support for security tooling integrations, including triage of pipeline failures, report ingestion issues, and tooling upgrades.
Contribute to continuous improvement of DevSecOps strategy, governance, and compliance alignment through automation and measurable outcomes.
Required Skills
8–12 years of experience in DevOps / DevSecOps / Security Engineering / Platform Engineering roles with strong CI/CD ownership.
