- Company Name
- Vestwell
- Job Title
- DevSecOps Engineer
- Job Description
-
Job title: DevSecOps Engineer
Role Summary: Lead the design, implementation, and operation of security controls across the organization’s multi‑platform infrastructure. Drive security governance, compliance, and risk management, embed secure‑by‑design practices into the software development life cycle, and automate threat detection, monitoring, and incident response for public‑facing services.
Expectations:
- Minimum 4 years of hands‑on experience in DevSecOps, Security Engineering, Platform Engineering, or Site Reliability Engineering.
- Proven ability to build and deploy security systems from inception, with a strong focus on AWS cloud security, infrastructure as code (Terraform preferred), and containerized environments (ECS, Kubernetes).
- Demonstrated expertise in automating security controls (SAST, SCA, DAST) and integrating them into CI/CD pipelines with minimal developer friction.
- Strong knowledge of threat modeling, incident response, observability, runtime and infrastructure security.
- Proactive, collaborative mindset that balances detailed security tasks with long‑term strategy and scalability initiatives.
Key Responsibilities:
1. Operate core security infrastructure: observability, detection, and protection platforms.
2. Design resilient, scalable, secure-by‑default systems.
3. Enable real‑time monitoring, threat hunting, and incident response.
4. Build and maintain an automated public asset inventory to expose the real‑time web attack surface and eliminate shadow IT.
5. Own CI/CD pipeline security tooling (SAST, SCA, DAST) and develop workflow automation for triage and remediation.
6. Deploy and maintain runtime protection: threat detection, file‑integrity monitoring, micro‑segmentation for containers.
7. Act as a senior security partner to engineering teams: provide secure architecture guidance, lead threat modeling exercises, support incident response, and foster a pragmatic security culture.
Required Skills:
- Proficiency in at least one scripting language (Python, Go, or similar).
- Deep experience with Infrastructure as Code (Terraform, CloudFormation).
- Strong AWS security experience (IAM, VPC, Secrets Manager, GuardDuty, etc.).
- Container security expertise (ECS, Kubernetes, container runtime).
- Solid foundations in threat modeling, incident response, observability, detection, and runtime/infrastructure security.
- Ability to design, implement, and operate scalable security observability and defense systems.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, or related technical field (preferred).
- Relevant certifications such as AWS Certified Security – Specialty, CISSP, or equivalent (advantageous but not mandatory).