Senior DevSecOps Engineer

Job not on LinkedIn

🔥 34 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

HEAVY CONSTRUCTION SYSTEMS SPECIALISTS INC

WebsiteLinkedInAll Job Openings

- employees

🏗️ Construction

☁️ SaaS

🏢 Enterprise

Construction • SaaS • Enterprise

HEAVY CONSTRUCTION SYSTEMS SPECIALISTS INC is a software company (commonly known as HCSS) that builds and sells technology tailored to heavy civil construction contractors. It provides applications for estimating, project and field management, equipment and fleet maintenance, and related operational workflows to help contractors plan, run, and analyze heavy construction projects.

📋 Description

• Improve, secure, and standardize software delivery practices across development teams. • Serve as a technical leader and trusted advisor on application security and DevSecOps. • Own or support application vulnerability management from detection through remediation, exception, or formal risk acceptance. • Triage findings from security tools, penetration tests, dependency scans, cloud scans, code reviews, and internal assessments. • Prioritize vulnerabilities based on severity, exploitability, business impact, application criticality, exposure, compensating controls, and compliance requirements. • Partner with development teams to drive remediation of high-risk and recurring vulnerabilities. • Track and communicate remediation progress, vulnerability trends, SLA performance, and application security posture. • Define vulnerability remediation SLAs, exception processes, risk acceptance criteria, and security reporting standards. • Design, implement, manage, and secure cloud-based application environments, preferably within Azure. • Apply Azure security best practices, secure access patterns, encryption, logging, monitoring, and policy-based controls. • Monitor and troubleshoot cloud services and support secure configuration and hardening of hosting environments, databases, networking, storage, and platform services. • Implement and improve secrets management across development, test, staging, and production environments. • Eliminate hardcoded secrets, improve secret rotation, and integrate secrets scanning into repositories and CI/CD pipelines. • Advise developers, architects, QA engineers, product teams, and engineering managers on security and DevOps. • Create secure coding guidance, reusable examples, internal documentation, reference patterns, and developer-friendly security standards. • Conduct training, workshops, and coaching on application, API, CI/CD, secrets, dependency, and cloud security. • Mentor junior DevOps engineers and promote a collaborative security culture. • Contribute to application security standards, secure coding policies, cloud security standards, pipeline requirements, and DevSecOps governance. • Align applications, cloud environments, pipelines, and development workflows with security and compliance requirements. • Evaluate the effectiveness of security tooling, automation, standards, and processes.

🎯 Requirements

• 8+ years of experience in DevOps, DevSecOps, application security, security engineering, software engineering, platform engineering, or a related technical field. • Strong hands-on experience with cloud services, preferably Azure, including application hosting, networking, storage, databases, identity, monitoring, access control, and security services. • 5+ years of experience designing, developing, securing, and maintaining CI/CD pipelines using Azure DevOps, GitHub Actions, YAML, GitLab CI, Jenkins, or similar platforms. • Strong experience embedding SAST, DAST, SCA, secrets scanning, dependency scanning, container scanning, and other automated security validation tools into CI/CD pipelines. • Deep understanding of secure SDLC, DevSecOps principles, secure software development practices, and modern application security concepts. • Strong understanding of OWASP Top 10, API security, authentication, authorization, input validation, session management, encryption, secure error handling, secrets handling, and software supply chain risk. • Experience identifying, triaging, prioritizing, and driving remediation of application security vulnerabilities. • Experience with vulnerability management practices, security scanning tools, risk assessment, remediation tracking, exception handling, and risk acceptance workflows. • Experience with secrets management solutions such as Azure Key Vault, HashiCorp Vault, or equivalent technologies. • Experience with scripting and automation using PowerShell, Azure CLI, Bash, Python, Go, or similar technologies. • Ability to read, understand, and reason about application code in C#, Java, JavaScript, TypeScript, Python, Go, or similar languages. • Familiarity with OWASP, NIST, CIS, SOC 2, ISO 27001, PCI DSS, GDPR, or similar frameworks. • Advanced cloud, DevOps, or security certifications such as AZ-400, Microsoft Certified: Azure Security Engineer, CISSP, CSSLP, CCSP, GWEB, GWAPT, or equivalent are bonus qualifications. • Strong troubleshooting, analytical, problem-solving, communication, independent work, prioritization, and cross-functional collaboration skills. • Proactive attitude toward continuous improvement, automation, secure engineering practices, and developer enablement.

🏖️ Benefits

• Flexibility to work Remotely • Medical, dental, and vision coverage with company-paid and employee-paid options • Paid holidays, sick days, and personal time off • Employee Resource Groups (ERGs) that foster connection and inclusion • On-site amenities including a covered basketball court, soccer field, track, pickleball/tennis courts, gym, etc. • Dog-friendly campus and WiFi-accessible courtyards • 401(k) with a 5% company match • Coverage for employee professional development and wellness

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume