Senior DevSecOps Engineer

Security Engineering & Cloud Security

Application Security & DevSecOps

• Identify and address security risks in application architecture, authentication, APIs, and data flows throughout the product lifecycle.
• Integrate security capabilities into CI/CD pipelines and engineering workflows, including SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy-based controls.
• Lead threat modeling, architecture reviews, and secure design discussions to identify security risks early in the software development lifecycle.
• Build developer-friendly security guardrails, reusable patterns, and automations that improve security without slowing delivery velocity.
• Drive timely remediation of security findings by enabling engineering teams with practical guidance, automation, and secure-by-default patterns.

Security Modernization & Operational Excellence

Automation, AI & Engineering Enablement

What Success Looks Like

You Must Have

• 5+ years of experience in Security Engineering, Application Security, Cloud Security, DevSecOps, or related security-focused engineering roles within cloud-native SaaS environments.
• Strong experience designing, securing, and modernizing Azure environments, including Azure networking, governance, RBAC/PIM, Azure Policy, and secure connectivity patterns.
• Experience improving application security through secure SDLC practices, threat modeling, CI/CD security controls, and engineering partnership.
• Hands-on experience implementing DevSecOps capabilities such as SAST, DAST, dependency scanning, secrets management, software supply-chain security, and policy automation.
• Experience with Kubernetes, Docker, container security, IaC, and modern cloud-native platforms.
• Hands-on experience with GitHub, GitHub Actions, GitHub Advanced Security (or equivalent), SIEM platforms, observability tooling, and cloud security technologies.
• Strong automation, scripting, troubleshooting, and cross-functional collaboration skills, with a focus on scalable solutions and operational improvement.
• Experience leveraging AI-assisted engineering tools (such as GitHub Copilot, Claude Code, or similar) and a demonstrated curiosity for applying automation and emerging technologies to improve security and engineering outcomes.

What We Offer

• Market competitive pay leveraging Carta data
• Employee recognition through Bonusly (birthdays, anniversaries, achievements, etc.)
• 401(k) retirement plan with company matching- 50% match up to 6% of compensation after 90 days
• We value our employee’s work-life balance and encourage taking advantage of Unlimited PTO
• Supportive time off including paid volunteer days and company holidays
• Employer-contributed healthcare benefits, encompassing medical, dental, and vision coverage, with plans available for dependents and choices for Health Savings Accounts (HSA) and Flexible Spending Accounts (FSA).
• 12 weeks primary parent leave, 4 weeks secondary parent leave - full pay (adoption as well)
• We pride ourselves on Community and host exciting company outings and events.
• We’ve recently noticed an increase in recruitment scams where individuals are impersonating recruiters to obtain personal or financial information through fraudulent interviews and job offers. Please note that all legitimate communication from Virtuous will only come from the @ virtuous.org domain. If you receive a message from other domains, even if they look similar (e.g., virtuouscareers.org or virtuousjobs.com ), they are not legitimate and we recommend disregarding it immediately.