Jobs

Job Title: Senior DevSecOps Engineer

Client: Commonwealth of Pennsylvania

Job ID: 799484 - hybrid (60% remote vs. 40% onsite), 1st day onsite onboarding

Location: Mechanicsburg, PA 17050

Closing Date:04/17/2026

Role summary

PSDC (Public Safety Delivery Center) requires the services of a Senior DevSecOps Engineer to act as consultant with the PSDC Solutions Management group.

Hands-on security automation for AWS delivery.

Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST.

Azure support is a future consideration, not a core day-one duty.

Scope boundaries

Does not own enterprise AWS Organizations or SCP operations.
Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams.
Focuses on preventive controls and compliance automation, not incident response.


What you will deliver

First 90 days

Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.
Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.
IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.
Evidence exports tying checks to control IDs and producing auditor-ready artifacts.


Ongoing

Harden CDK/CFT modules and pipeline templates as compliance needs evolve.
Coach pilot teams to adopt templates.
Raise gaps to enterprise teams for org-level enforcement.


Day-to-day responsibilities

Author and maintain AWS CDK

Platform DevSecOps Engineer
Location: Fort Lee, NJ (Onsite)
Duration: 12 Months+
Employment Type: W2 Preferred

Position Overview
Our premiere client//'s Digital Engineering Enablement team is seeking a Platform DevSecOps Engineer in the DevOps and Security space. The candidate will work with a team of passionate engineers who strive to demonstrate continued excellence in the fields of Continuous Integration, Continuous Delivery/Deployment, and Infrastructure as Code.

The candidate will work on build, deploy, and maintenance aspects of digital applications. The candidate will also closely work with software developers, infrastructure administrators, and enterprise architects to plan for, implement, and maintain software solutions and systems architecture technologies that run digital products and services.

Using the latest tools and technologies, this role will support environments’ CI/CD, CDN, Infrastructure, and Security for applications hosted in data centers and in the cloud. Responsibilities include implementing solutions to provision and manage environments; performing vulnerability scans and patch deployment; managing Reverse Proxy environments; and monitoring existing infrastructure and applications.

Responsibilities


Build, deploy, and maintain CI/CD pipelines across digital applications

Administer Content Delivery Network changes for properties and security

Administer security aspects across data centers and cloud environments

Demonstrate successful design, planning, and implementation of highly reliable solutions, including troubleshooting and capacity planning

Collaborate with Cyber Security to identify solutions for remediation of vulnerabilities in the web and middleware infrastructure

Maintain a deep understanding of network security principles and how to apply them

Perform hands-on troubleshooting of network and security issues using packet capture tools

Demonstrate s

Description:
Travel Requirement: Up to 10%

Security Clearance: Active Secret clearance required (interim OK)

Citizenship: US Citizenship required

Job Description:

Sherpa 6 is seeking a Lead DevSecOps Engineer to oversee the secure design, automation, and execution of our software delivery pipelines. We build mission-critical systems for the Department of Defense (DoD) and commercial customers where security, reliability, and compliance are essential. This role is responsible for integrating security throughout the software development lifecycle, automating infrastructure and deployments, and ensuring consistent, compliant releases across all environments. The ideal candidate is a hands-on technical leader who can drive DevSecOps best practices while collaborating across engineering, QA, security, and program teams.

Responsibilities:

Lead the design and implementation of secure CI/CD pipelines across development, staging, and production environments.
Own the end-to-end software release process, ensuring reliability, traceability, and compliance.
Integrate automated security scanning (SAST, DAST, dependency, container) into build and deployment workflows.
Develop and maintain Infrastructure as Code (IaC) using Terraform or Pulumi to provision and manage cloud environments.
Ensure compliance with DoD and industry security standards (e.g., RMF, NIST, STIGs).
Collaborate with development and QA teams to validate release readiness and enforce quality gates.
Monitor, troubleshoot, and resolve build, deployment, and infrastructure issues.
Implement logging, monitoring, and observability best practices across environments.
Drive process improvements to increase automation, efficiency, and deployment reliability.
Maintain release documentation, runbooks, and security artifacts required for audits and ATO support.
Mentor junior and mid-level DevSecOps engineers to enhance their skillsets and grow a team
Requirements:

Bache

As a Senior Security Engineer you will design, implement, and maintain security systems and tooling across our infrastructure. The ideal candidate will have a strong background in security engineering, an in-depth understanding of security tools, and a proactive approach to mitigating cybersecurity risks. This role involves both hands-on technical work, working closely with cross-functional teams and strategic collaboration to enhance our overall security posture. This candidate will provide technical leadership and coach junior members of the security engineering team.

Primary Duties:

Primary focus will be on infrastructure security through architecture reviews, threat modeling for new and existing services and security tool implementations, while leveraging automation to scale security solutions.
Design, deploy, and manage advanced security tools, including SIEM, EDR, DLP, vulnerability management, and firewalls.
Engineer solutions to integrate security tooling across cloud environments, ensuring seamless protection and visibility. Collaborate with cloud engineering teams to implement and secure cloud-native solutions (e.g., IAM, VPC, security groups, cloud firewalls), implement security controls for cloud infrastructure and containerized environments.
Lead the evaluation, implementation, and configuration of new security technologies to address evolving threats and stay updated on emerging technologies, trends, and best practices in security engineering and tooling.
Develop and maintain secure configurations for operating systems, applications, and networking equipment and Automate security processes using scripting languages (Python, PowerShell) and tools like Terraform or Ansible.
Conduct security assessments and ensure vulnerability management programs are effective, addressing gaps proactively.

Minimum Qualifications:

Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
7+ years

Dev Sec Ops Engineer

Altamira Technologies is seeking a skilled DevSecOps engineer to design and implement the modernization of a legacy multi-security domain monolith on-prem system into a containerized private/public cloud system with CI/CD processes supporting cyber security requirements to enable rapid capability deployments. Candidate should be prepared to work across Integrated Program Teams to include Software Engineering, System Administration, Cyber Security, Operations, and Program Management to design, implement, maintain new DevSecOps pipelines, and secure cloud-native delivery platforms. Experience dealing with and finding solutions for dissimilar environments between dev/test/prod and multiple-security domains is required, including secure artifact promotion and configuration management across domain boundaries.

This position will require experience with enterprise CI/CD, GitOps, and cloud-native tooling and involve some scripting in languages like BASH and Python with proficiency in at least one modern programming language (Python or Go preferred).

Other skills to include: automated testing, automated deployments (CI/CD pipelines), and branching strategy and implementation, GitOps workflows, policy-as-code enforcement, and secure software supply chain practices.

Candidate, while having access to supporting teams, will largely be self-reliant and capable of designing and implementing solutions with architectural ownership and accountability.

Required Skills:

5+ years of experience developing tools and processes to drive DevOps or DevSecOps maturity by automating builds, regression testing, monitoring, and pushing releases across environments

5+ years of experience troubleshooting, triaging, and resolving issues for CI/CD pipeline failures or slowness

Experience working in hardened Kubernetes-based platforms; implementing GitOps workflows (ArgoCD preferred), container image build automation (Kaniko), and managing private artifact

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on X, Facebook, Instagram, YouTube, LinkedIn and Tik Tok.

Job Description

Join our Information Security team as a Senior DevSecOps Engineer and be part of the core team building a global enterprise-grade Application Security program from the ground up. You'll play a vital role in implementing security testing tools, integrating them into our CI/CD ecosystems, and delivering actionable findings to developers—enabling secure software delivery at scale. Together, we'll make a remarkable impact on people's lives by protecting the systems that discover and deliver life-changing medicines to patients who need them.

This position can be virtually anywhere in the U.S.

Responsibilities:

Implementing and maintaining Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) to identify vulnerabilities and configuration issues during the software development lifecycle.
Implementing and maintaining tools (such as Application Security Posture Management / ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows.
Integrating security tooling with large-scale enterprise CI/CD pipelines.
Building and managing tooling and processes to drive efficient DevSecOps and Application Security (AppSec) operations.


Qualifications

Bachelors Degree and 7 years experience OR Masters Degree and 6 years experience OR PhD and 0 years experience
4+ years of hands-on technical experience in DevS

Job Title: DevSecOps Engineer – Auburn, AL

Company Overview: Integrated Solutions for Systems (IS4S) is a fast-growing small business at the forefront of developing innovative solutions for the warfighter. We use applied research and development combined with novel systems integration to enhance capabilities of our armed forces.

Position: DevSecOps Engineer

Location: Auburn, AL; Aberdeen, MD

Job Type: Full-time

Job Description: IS4S is seeking a DevSecOps Engineer in Auburn, AL to assist development enabling Command and Control (C2), Fires, and Electromagnetic Warfare (EW) technologies for the DoD. The person or persons filling this position will integrate into an existing, multi-disciplinary team to create, develop, integrate, and deploy solutions used by warfighters. Responsibilities include

Assisting with architecture, design, development, integration, testing, and deployment


Creating pipelines to automate testing and deployment


Maintaining a strong cybersecurity posture while incorporating modern development tools and practices


Identifying vulnerabilities, real or perceived, adjudicating them, and either explaining false positives or developing a Plan of Action and Milestones (POAM)


Integrating security and compliance into products, including encryption, access management, and system logging


Adhering solutions to DoD Security Technical Implementation Guides (STIGs)


Develop and maintain cybersecurity artifacts (scan results, POAMs, SBOMs, system diagrams, etc.)


Communicating and interacting with customers, stakeholders, and other companies

The challenges facing our nation are constantly evolving. Therefore, we are looking for self-driven, entrepreneurial team members willing and able to constantly learn, adapt, and find ways to develop and integrate solutions. Selected applicants will be expected to gain familiarity with the underlying domain (e.g., EW, Fires) and its role in the larger

Job Seekers can review the Job Applicant Privacy Policy by clicking here (http://ryder.com/job-applicant-privacy-policy) .

Job Description :

SUMMARY

We seek a highly motivated and experienced Application Security Engineer to join our growing security team. This role is highly technical and candidates must possess a solid understanding of the security and privacy of our company's applications and data.

The Application Security Engineer must understand development, coding, security engineering, and secure systems configurations. This position ensures that every step of the software development lifecycle (SDLC) follows security best practices. This involves conducting security assessments with SAST and DAST tools, reading source code, threat modeling, and designing and implementing secure software development practices. They will determine where security vulnerabilities exist and implement fixes. They must understand how an application may be misused and exploited. The Application Security Engineer will collaborate with software development teams and provide guidance on best practices for secure coding. They will also stay up to date on the latest security trends and technologies and integrate them into the organization's security strategy. The ideal candidate will have strong analytical and problem-solving skills, as well as experience in application security and knowledge of programming languages and web technologies. A Bachelor's degree in Computer Science and certifications such as CISSP, OSCP, or CASE are preferred.

ESSENTIAL FUNCTIONS

Conduct security assessments that require expertise of our organization's applications using both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies.
Collaborate with software development teams to integrate security into the development life cycle.
Conduct security assessments of web, mobile, and other applications. Analyze security assessment results to

Kennesaw, USA Full Time 4 Y ago

As a QA Automation Engineer for a leading investment manager, you will be supporting multiple projects by collaborating with others to understand business requirements, developing test plans, creating and implementing manual and automated tests and ensuring that our products are high-quality and functioning properly.

Job Description

Job Features

Job Category: Software Developer
Education: B-Tech or MBA
Positions: 8
Experience: 6+ Years
Posted Date: 4 Y ago

At Claritev, we pride ourselves on being a dynamic team of innovative professionals. Our purpose is simple - we strive to bend the cost curve in healthcare for all. Our dedication to service excellence extends to all our stakeholders – internal and external - driving us to consistently exceed expectations. We are intentionally bold, we foster innovation, we nurture accountability, we champion diversity, and empower each other to illuminate our collective potential.

Be part of our amazing transformational journey as we optimize the opportunity towards becoming a leading technology, data, and innovation voice in healthcare. Onward and Upward!!!

JOB SUMMARY:

This position assesses the quality of software products utilizing various platforms and technologies in support of Company initiatives. This position utilizes skills as a seasoned, experienced professional with a full understanding of industry best practices in order to ensure that the Company’s business applications function correctly and that they meet or exceed the requirements of the business users. This position plans for and estimates the test approach and scope, coordinating test cases design and execution, defect management and escalating issues when appropriate as well as communicating status on a timely basis. This position develops and executes a solid test approach that satisfies the business’ needs while resolving a wide range of challenges in innovative ways. This position may oversee the work in-take process.

JOB ROLES AND RESPONSIBILITIES:

Designs and develops test infrastructure, frameworks and tools.


Tests APIs, user interfaces, web services and/or web applications.


Create and execute automated tests according to appropriate quality plans, test strategies and processes for development activities in concert with business and project management efforts; management and execution of agile project plans and meeting delivery commitments.


Seeks out oppor