DevSecOps Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Mastercam

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1983

🚘 Automotive

💼 Consulting

📦 Logistics

Automotive • Consulting • Logistics

Mastercam is a leading provider of CAD/CAM software solutions designed to address the manufacturing challenges faced by a variety of industries. Known for its innovative tools and intuitive interface, Mastercam caters to industrial and educational users, helping streamline production processes and enhance machining precision. With its diverse range of products and comprehensive support, Mastercam serves multiple sectors, including aerospace, automotive, and energy, making it a crucial ally in modern manufacturing.

📋 Description

• Secure and govern Mastercam's cloud-native application platforms, AI-enabled solutions, and supporting infrastructure • Integrate security throughout the software development lifecycle, including CI/CD pipelines, Kubernetes environments, identity and access management systems, cloud services, and AI workloads • Design, implement, and maintain security controls protecting applications, infrastructure, data, and AI services • Establish security standards, improve risk management practices, and promote secure-by-design principles • Secure Kubernetes-based platforms and containerized workloads • Implement Kubernetes security controls including RBAC, Network Policies, Pod Security Standards, and namespace segmentation • Perform security reviews of platform architecture and application deployments • Develop infrastructure hardening standards and security baselines • Integrate security controls into CI/CD pipelines and implement automated vulnerability scanning, code analysis, and compliance checks • Establish secure software supply chain processes and maintain security guardrails within GitOps workflows • Partner with development teams to remediate vulnerabilities and improve secure coding practices • Secure authentication and authorization systems and implement least-privilege access controls • Support identity federation, SSO, OAuth2, OpenID Connect, and MFA • Review systems for access governance and privileged access risks • Manage secrets, certificates, encryption keys, and service credentials, including automated rotation and certificate lifecycle management • Secure API gateways and service-to-service communications against OWASP API Security standards • Implement API authentication, authorization, rate limiting, API threat protection, and Zero Trust networking controls • Create security dashboards, alerts, metrics, and monitoring capabilities • Collaborate during security investigations and incident response activities • Analyze platform telemetry and audit logs to identify threats and control gaps • Support security reviews for AI and machine learning workloads • Help protect against prompt injection, sensitive data exposure, and model misuse • Participate in AI governance and risk assessment activities • Evaluate risks associated with LLMs, vector databases, and AI platforms

🎯 Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered • 4–5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering • 1+ year of hands-on experience supporting Kubernetes or containerized application environments • Experience securing cloud-native applications and services • Experience implementing vulnerability management and application security programs • Experience working with software development teams and CI/CD pipelines • Experience supporting AWS, Azure, or Google Cloud environments • Knowledge of Kubernetes architecture, Pods, Deployments, Services, Ingresses, RBAC, Network Policies, container security, workload isolation, and cluster security fundamentals • Experience with Docker, container image security, image scanning, vulnerability remediation, and secure image lifecycle management • Experience with CI/CD pipelines, source code management platforms, Git workflows, automation, and scripting • Understanding of SAST, DAST, dependency scanning, secret scanning, and Infrastructure-as-Code security • Knowledge of OAuth2, OpenID Connect, SAML, MFA, and Role-Based Access Control • Experience with vulnerability management, threat detection, security monitoring, incident response support, and risk assessments • Ability to automate security processes using Python, Bash, and PowerShell • Preferred certifications include Security+, CKA, CKS, AWS Certified Security Specialty, CISSP, CCSP, or GIAC Certifications