DevSecOps Security Engineer

🕒 September 26

🇺🇸 United States – Remote

💵 $91.1k - $113.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 45 days.
• Jobs at this company usually fill in 76 days.
• Reposted once.

Apply Now

Find Similar Remote Jobs

Mastercam

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1983

🚘 Automotive

💼 Consulting

📦 Logistics

Automotive • Consulting • Logistics

Mastercam is a leading provider of CAD/CAM software solutions designed to address the manufacturing challenges faced by a variety of industries. Known for its innovative tools and intuitive interface, Mastercam caters to industrial and educational users, helping streamline production processes and enhance machining precision. With its diverse range of products and comprehensive support, Mastercam serves multiple sectors, including aerospace, automotive, and energy, making it a crucial ally in modern manufacturing.

📋 Description

• Secure Kubernetes-based platforms and containerized workloads • Implement and maintain Kubernetes security controls, including RBAC, Network Policies, Pod Security Standards, and namespace segmentation • Perform security reviews of platform architecture and application deployments • Develop infrastructure hardening standards and security baselines • Integrate security controls into CI/CD pipelines • Implement automated vulnerability scanning, code analysis, and compliance checks • Establish secure software supply chain processes • Partner with development teams to remediate vulnerabilities and improve secure coding practices • Develop and maintain security guardrails within GitOps workflows • Secure authentication and authorization systems and implement least-privilege access controls • Support identity federation, SSO, OAuth2, OpenID Connect, and MFA • Review systems for access governance and privileged access risks • Manage secrets, certificates, encryption keys, and service credentials securely • Support automated secret rotation and certificate lifecycle management • Secure API gateways and service-to-service communications • Implement API authentication, authorization, rate limiting, and threat protection controls • Support Zero Trust networking initiatives • Create security-event dashboards and alerts, metrics, and monitoring capabilities • Collaborate during security investigations and incident response activities • Analyze platform telemetry and audit logs to identify threats and control gaps • Support security reviews for AI and machine learning workloads • Help protect against prompt injection, sensitive data exposure, and model misuse • Participate in AI governance and risk assessment activities • Evaluate risks associated with LLMs, vector databases, and AI platforms

🎯 Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered • 4–5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering • 1+ year of hands-on experience supporting Kubernetes or containerized application environments • Experience securing cloud-native applications and services • Experience implementing vulnerability management and application security programs • Experience working with software development teams and CI/CD pipelines • Experience supporting AWS, Azure, or Google Cloud environments • Kubernetes architecture, Pods, Deployments, Services, Ingresses, RBAC, Network Policies, container security, workload isolation, and cluster security fundamentals • Docker, container image security, image scanning, vulnerability remediation, and secure image lifecycle management • CI/CD pipelines, source code management platforms, Git workflows, automation and scripting • Understanding of SAST, DAST, dependency scanning, secret scanning, and Infrastructure-as-Code security • OAuth2, OpenID Connect, SAML, MFA, and Role-Based Access Control • Vulnerability management, threat detection, security monitoring, incident response support, and risk assessments • Ability to automate security processes using Python, Bash, or PowerShell • Preferred certifications include Security+, CKA, CKS, AWS Certified Security Specialty, CISSP, CCSP, or GIAC Certifications

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume