devsecops engineer

Arpatech

Job Title: DevSecOps EngineerLocation: Karachi or Islamabad(on-site), other cities remoteShift Timings: 9 am to 6 pmArpatech (Pvt) Ltd is looking for a DevSecOps/AppSec specialist with 3-4 years of experience to integrate security into our software lifecycle. You will bridge the gap between development, operations, and security to build resilient cloud-native applications.Core Responsibilities1. CI/CD Integration: Embed security controls and automated gates into Jenkins pipelines.2. Security Testing: Design and execute SAST, DAST, and SCA (Software Composition Analysis) to identify vulnerabilities early.3. Code &amp; Architecture Review: Perform deep-dive manual source code reviews and security assessments.4. Infrastructure Security: Secure Docker/Kubernetes environments and cloud platforms (AWS/Azure).5. Remediation &amp; Guidance: Partner with developers to implement secure coding practices (OWASP Top 10) and patch vulnerabilities.6. Automation: Build custom security tooling and frameworks using Python or Bash.Technical Requirements- Experience: 3-4 years in DevSecOps or Application Security.- Tools: Jenkins, Git, Docker, Kubernetes, and Cloud (AWS or Azure).- Knowledge: Expertise in the OWASP Top 10, secure configuration management, and application hardening.- Testing: Proficiency in security testing methodologies and automated scanning tools.- Education: Bachelor&rsquo;s degree in Computer Science or a related field.- Bonus: Certifications like OSCP, OSWE, or AWS Certified Security are highly preferred.Soft Skills- Strong analytical and problem-solving mindset.- Excellent communication skills for cross-functional collaboration.- Proactive approach to staying ahead of emerging security trends.Work Location: Remote

DevSecOps Engineer

Steampunk

<div>Overview:
<div>
As a Senior DevSecOps Engineer, you will work with our growing DevSecOps practice delivering features to support cloud and application development in an AI-enabled software environment. We are looking for candidates with 5-7 years experience with cloud platform services and DevSecOps practices such as build/release management, CI/CD practices, and process automation.
</div>Contributions:
<div>
Responsibilities include:</div><ul><li>
Establish development tools and infrastructure for automation</li><li>
Understand the needs of stakeholders and convey this to developers</li><li>
Automate and improve development, testing, deployment, and release processes</li><li>
Test and examine code written by others and analyze results</li><li>
Ensure that systems are safe and secure against cybersecurity threats</li><li>
Identify technical problems, perform root cause analysis, and develop software updates and &lsquo;fixes&rsquo;</li><li>
Work with software developers and software engineers to ensure that development follows established processes and works as intended</li><li>
Support enterprise Cloud applications or infrastructure through infrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing, such as CI/CD</li><li>
Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations</li><li>
Leverage virtualization and containerization to optimize and modernize software systems</li><li>
Act as an individual contributor and mentor team members</li><li>
Engineer and implement solutions and provide recommendations for continuous improvement for the services provided</li><li>
Present regular status updates and provide cross training to other DevOps team members</li></ul> 
<div></div>
Qualifications:

Required:<ul><li>
Ability to obtain a U.S. government Security Clearance</li><li>
Bachelor's Degree in an IT field OR BS in a non-IT field and 2 years related IT experience</li><li>
5+ years of experience with cloud platforms (i.e. AWS, Azure, or GCP)</li><li>
5+ years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket</li><li>
5+ years of experience with one or more programming or scripting languages</li><li>
5+ years of application DevSecOps experience with development experience in an Agile environment</li><li>
3+ years of experience implementing docker containers and utilizing platforms such as Kubernetes</li><li>
5+ years of experience implementing infrastructure as code and orchestration</li><li>
5+ years of experience building CI/CD pipelines with tools such as Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, TravisCI</li><li>
5+ years of experience integrating deployments with industry standard DevSecOps tooling and orchestration</li><li>
Experience integrating test automation including performance, security, and functional tests into CI/CD Pipelines</li></ul>
Preferred:<ul><li>
Certifications:<ul><li>
AWS Certified DevOps Engineer</li><li>
AWS Certified Solution Architect Professional</li><li>
Microsoft Certified DevOps Engineer Expert</li><li>
SAFe DevOps Certification</li></ul></li><li>
Experience implementing automated testing frameworks including Selenium</li><li>
Excellent written and verbal communication skills</li><li>
Strong interpersonal and collaborative skills</li><li>
Experience with documenting an as-is state of the environment, performing a gap analysis, and producing artifacts that articulate options and recommendations</li><li>
Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby</li><li>
Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible</li></ul>
About steampunk:
<div>
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $150,000 to $185,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk&rsquo;s total compensation package for employees. Learn more about additional Steampunk benefits here.</div><div></div><div> 
Identity Statement</div><div>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</div><div></div><div> 
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers &ndash; and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.</div><div></div><div> 
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.</div></div>

Senior DevSecOps Engineer

The Virtual Assistant & Company

Senior DevSecOps Engineer (AWS) &ndash; RemoteFull-Time | Senior Level (5+ Years Experience) We are hiring a Senior DevSecOps Engineer to support and secure an AWS-based platform in the healthcare space. This role focuses on cloud security, CI/CD pipeline security, infrastructure reliability, and incident response. Great company, great team, great benefits!Key Responsibilities:<ul><li>Implement DevSecOps practices across CI/CD pipelines (SAST, DAST, SCA, secrets scanning, container security)</li><li>Manage and improve AWS cloud security posture (IAM, VPC, KMS, Security Hub, GuardDuty, AWS Config)</li><li>Lead threat detection, logging, SIEM integration, and incident response</li><li>Own vulnerability management and remediation tracking (CVSS/EPSS-based)</li><li>Develop and enforce policy-as-code (Terraform, Sentinel, OPA)</li><li>Maintain infrastructure as code (Terraform) and platform uptime (SLOs, backups, DR)</li></ul>Required Qualifications:<ul><li>5+ years in DevSecOps, Cloud Security, or DevOps (AWS)</li><li>Strong experience with AWS services (EC2, S3, RDS, IAM, Lambda, VPC, CloudTrail)</li><li>Hands-on experience with CI/CD tools (GitHub Actions, GitLab CI)</li><li>Experience with container security (Docker, Trivy, Grype)</li><li>Proficiency in Terraform and infrastructure as code</li><li>Experience with SIEM tools (Splunk, Datadog, Elastic) and incident response</li><li>Scripting experience in Python or Bash</li></ul>Preferred Qualifications:<ul><li>AWS or security certifications (AWS Security Specialty, CISSP, OSCP, GIAC)</li><li>Experience with SOC 2, NIST, CIS benchmarks</li><li>Familiarity with SSPM tools and SaaS security</li><li>Experience in healthcare or regulated environments</li></ul>Why Join Us:<ul><li>Fully remote role</li><li>High-impact work securing a healthcare platform</li><li>Opportunity to own and build modern cloud security architecture</li><li>Collaborative, fast-moving environment</li><li>Salary DOE.</li></ul>Please submit your CV and cover letter to Kathleen.Thank you and good luck!Pay: $101,997.50 - $122,835.70 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Vision insurance</li></ul>Application Question(s):<ul><li>Where in the US do you reside?</li><li>Are you bound by an NDA by another company or individual that would prevent you from taking this role?</li><li>Are you willing to go through a background check?</li></ul>Work Location: Remote

<div>
 
 
 
 Company Overview
 
 :
 
 
 
 
 
 
 Dar, the founding member of the Sidara group, is an international multidisciplinary consulting organization specializing in engineering, architecture, planning, environment, project management, facilities management, and economics. Sidara operates in 60 countries with 20,500 professionals, Dar connects people, places, and communities through innovative solutions to the world's most complex challenges. We deliver projects from inception through completion, embracing challenges to empower communities worldwide. Learn more at www.dar.com.
 
 
 
 
 
 
 
 Our Vision and Values:
 
 
 
 
 
 
 
 We aspire to be the chosen home of those with a gift for crafting solutions that empower people and an unwavering passion for learning and innovation. Our core values shape our culture and guide our decision-making. We are committed to:
 
 
 
 
 <ul>
 <li>
 Excellence
 </li>
 <li>
 Responsibility
 </li>
 <li>
 Empowerment
 </li>
 <li>
 Connectivity
 </li>
 <li>
 Courage
 </li>
 </ul>
 
 
 
 
 
 
 Responsibilities
 
 :
 
 
 
 
 
 <ul>
 <li>
 Familiarity with Linux distributions (e.g., Ubuntu, RHEL) and Windows Server 2022+.
 </li>
 <li>
 Familiarity with web servers, reverse proxy, load balancers, and firewall setup.
 </li>
 <li>
 Deep knowledge of containerization and virtualization.
 </li>
 <li>
 Knowledge of cloud (e.g., AWS, Azure, or GCP) is a plus.
 </li>
 <li>
 Define, govern, and evolve the enterprise technical stack (React, TypeScript, Python, NodeJS, .NET Core, SQL, MongoDB).
 </li>
 <li>
 Build and maintain CI/CD pipelines in Azure DevOps, enabling automated testing, deployments, and monitoring.
 </li>
 <li>
 Embed security into the SDLC through secure coding standards, vulnerability scanning, and DevSecOps practices.
 </li>
 <li>
 Collaborate with cybersecurity to address threat modeling, risk mitigation, and compliance requirements.
 </li>
 <li>
 Collaborates with software developers to optimize application performance and resource usage.
 </li>
 <li>
 Automate infrastructure provisioning and configuration management (Infrastructure-as-Code).
 </li>
 <li>
 Evaluate emerging technologies and propose adoption strategies to modernize legacy systems.
 </li>
 <li>
 Documents system architecture, processes, and automation scripts thoroughly.
 </li>
 <li>
 Ability to discuss and demonstrate the value of Generative AI and Machine Learning (ML) use cases for enterprises.
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Software Engineering, or a related field (Master&rsquo;s preferred).
 </li>
 <li>
 3+ years of experience in software development,
 
 solution architecture
 
 , and
 
 DevSecOps engineering
 
 .
 </li>
 <li>
 Proven expertise in designing enterprise-scale systems and managing
 
 CI/CD
 
 pipelines.
 </li>
 <li>
 Strong knowledge of
 
 React, TypeScript
 
 ,
 
 Python
 
 ,
 
 NodeJS
 
 ,
 
 .NET Core
 
 ,
 
 SQL
 
 ,
 
 MongoDB
 
 , and cloud platforms.
 </li>
 <li>
 Experience with
 
 containerization
 
 (Docker, Kubernetes), Infrastructure-as-Code, and
 
 monitoring
 
 tools.
 </li>
 <li>
 Solid understanding of
 
 security frameworks
 
 , OWASP, and vulnerability management practices.
 </li>
 <li>
 Hands-on understanding of AI/ML use cases, automation platforms and Agentic AI as part of your daily toolkit.
 </li>
 </ul>
 
 
</div>

Powerhouse Institute, Inc

<div>Description:

NOTE: This is a full-time employment opportunity (No third parties, please). The candidate MUST be authorized to work in the United States without sponsorship and able to complete/pass/hold a public trust investigation. This is a remote opportunity; candidate must be based in the United States; ET time zone work schedule.
Daily Responsibilities<ul><li>
Support the implementation and maintenance of CI/CD pipelines using Jenkins and GitHub Actions.</li><li>
Assist with release management activities, including deployments, validation, and rollback support across environments.</li><li>
Maintain and support AWS cloud environments using services and frameworks such as AWS Cloud Development Kit.</li><li>
Monitor system health, performance, and availability using Datadog, Splunk, and Amazon CloudWatch, and respond to alerts and incidents.</li><li>
Assist in implementing security controls within CI/CD pipelines, including code scanning, dependency checks, and vulnerability remediation.</li><li>
Support identity and access management integrations using Okta, AWS Cognito, and Security Assertion Markup Language (SAML).</li><li>
Participate in incident response, troubleshooting, and root-cause analysis to maintain system reliability.</li><li>
Assist with infrastructure-as-code (IaC) development and maintenance under guidance from senior engineers.</li><li>
Collaborate with DevOps, security, and development teams on system integration and migration efforts.</li><li>
Provide secondary support for Salesforce-related DevOps activities, including assisting with deployments and version control processes using Copado.</li><li>
Participate in Agile and SAFe ceremonies such as daily standups, sprint planning, and retrospectives.</li><li>
Maintain documentation for operational procedures, deployment processes, and security controls.</li></ul>
Requirements:
<ul><li>Must be authorized to work in the United States without sponsorship.</li><li>
Must be able to complete/pass/hold at a minimum a federal public trust investigation.</li><li>
3&ndash;5 years of experience in DevOps, DevSecOps, cloud engineering, or a related role.</li><li>
Hands-on experience or familiarity with CI/CD tools such as Jenkins and/or GitHub Actions.</li><li>
Experience working with AWS cloud services and infrastructure-as-code tools such as AWS Cloud Development Kit, Terraform, or CloudFormation.</li><li>
Exposure to monitoring and logging tools such as Datadog, Splunk, or Amazon CloudWatch.</li><li>
Good understanding of DevSecOps principles, including secure coding and vulnerability management.</li><li>
Familiarity with authentication technologies such as Okta, AWS Cognito, or Security Assertion Markup Language (SAML).</li><li>
Experience with scripting (Python, Bash, or similar).</li><li>
Basic understanding of containerization (Docker) and/or orchestration (Kubernetes).</li><li>
Familiarity with Agile methodologies.</li><li>
Excellent communication Excellent communication and collaboration skills.</li></ul>
These qualifications are a PLUS<ul><li>
Exposure to Salesforce environments and DevOps tools such as Copado is a PLUS,</li><li>
Experience supporting federal or regulated environments (e.g., healthcare, or financial systems) is a PLUS.</li><li>
Familiarity with isecurity frameworks (NIST, FISMA) and ATO processes is a PLUS.</li><li>
Experience with Linux/Unix environments is a PLUS.</li><li>
Relevant certifications is a PLUS:</li><li>
 AWS Certified Developer or Cloud Practitioner</li><li>
 CompTIA Security+</li><li>
 Certified Scrum Master (CSM) or SAFe certification</li></ul>
Our Comprehensive Employee Benefits Package Includes:<ul><li>
401(k) Retirement Plan (Employer Match)</li><li>
Health Insurance Plans (Medical, Rx, Dental, and Vision &ndash; Open Access)</li><li>
Long Term and Short-Term Disability (Company Paid Benefit)</li><li>
Life Insurance (Company Paid Benefit)</li><li>
Employee Assistance Program (EAP)</li><li>
Generous Paid Time Off (PTO)</li><li>
Paid Holidays</li><li>
Voluntary Life and AD&amp;D Insurance</li><li>
Discount Programs for Consumer Products and Wellness Services</li></ul>
Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.</div>

Capital Group

<div>&ldquo;I can be myself at work.&rdquo;
You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness&mdash;and we&rsquo;re committed to fostering a strong sense of belonging in a respectful workplace.
We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day: Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community. 
&ldquo;I can influence my income.&rdquo; 
You want to feel recognized at work. Your performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You&rsquo;ll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses. 
&ldquo;I can lead a full life.&rdquo; 
You bring unique goals and interests to your job and your life. Whether you&rsquo;re raising a family, you&rsquo;re passionate about where you volunteer, or you want to explore different career paths, we&rsquo;ll give you the resources that can set you up for success.<ul><li>
Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options</li><li>
Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love</li><li>
Access on-demand professional development resources that allow you to hone existing skills and learn new ones</li></ul>
&ldquo;I can succeed as a Senior DevSecOps Engineer at Capital Group.&rdquo;
As a Senior DevSecOps Engineer within the Application Security team, you&rsquo;ll support, secure, manage and deploy solutions that secure the software delivery lifecycle for enterprise applications. This is a highly technical role, so you will need a strong understanding of automation, CI/CD infrastructure, software development, and cloud services. Knowledge of information security and application security tools is highly desirable.
The DevSecOps engineer supports the security of continuous integration and continuous deployment (CI/CD) initiatives and is an integrated team member working with software developers, system engineers, cybersecurity engineers and systems administrators. The role is security-focused and helps CI/CD pipelines deliver secure software in a scalable manner while showing developer empathy and engineering excellence such as obsession with security tool output quality, false positive removal, using data / metrics to improve tools that integrate into the CI/CD pipeline. This role is hybrid (in-office 3 days/week) in New York NY.
Responsibilities:<ul><li>
Simplify automation that applies security inter-workings with CI/CD pipelines.</li><li>
Work to consistently learn and share advanced skills and practices that promote team excellence.</li><li>
Build relationships with developers, stakeholders and scrum master&rsquo;s to incorporate security principles into engineering design and deployments.</li><li>
Supervise testing and validation in application security controls across projects.</li><li>
Oversee implementation of defensive practices and countermeasures across infrastructure and applications.</li><li>
Draft and uphold CI/CD security strategy and practices in tandem with other technical team leads.</li><li>
Serve as a point of contact for security-based escalations and remain tightly involved through resolution.</li><li>
Build services and tools to enable developers and engineers to easily use security components produced by Application Security team members.</li><li>
Support the ability to &ldquo;shift left&rdquo; and incorporate security early on and throughout the development lifecycle.</li><li>
Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.</li><li>
Leverage Vulnerability database sources to understand the weakness, probability and remediation options supplied by vendors as well as workarounds.</li><li>
Join forces and provision security principles in architecture, infrastructure and code.</li><li>
Regularly research and learn new tactics, techniques and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary through the CI/CD pipeline.</li><li>
Enrich DevOps architecture with security standards and best practices.</li><li>
Partner with teams to define key performance indicators (KPIs) and metrics across business units.</li></ul>
&ldquo;I am the person Capital Group is looking for&rdquo;<ul><li>
Bachelor&rsquo;s degree in Computer Science or related field and/or at least 7+ years&rsquo; experience in information technology, information security administration or security operations.</li><li>
Experience with agile workflows, including Scrum and Kanban.</li><li>
Hands-on experience of containers (e.g., Docker) and container orchestration (e.g., Docker Swarm, Kubernetes).</li><li>
Understanding DevSecOps tooling, including Terraform, Ansible, and CI/CD Pipelines.</li><li>
Experience with operations and security across Amazon Web Services (AWS).</li><li>
Ability to obtain and maintain technical team and business support to influence a collaborative effort to reduce attack surface while performing rapid, continuous implementation.</li><li>
Proficient in designing, building, and deploying complex engineering solutions</li><li>
Expert Programming knowledge in Python. Other Languages a bonus.</li><li>
Interested in Agentic software development, including developing agentic Skills to accelerate feature requests and improve the quality of solutions delivered.</li><li>
Excellence in communicating business risk and remediation requirements from assessments.</li></ul>
&ldquo;I can apply in less than 4 minutes.&rdquo; 
You&rsquo;ve reviewed this job posting and you&rsquo;re ready to start the candidate journey with us. Apply now to move to the next step in our recruiting process. If this role isn&rsquo;t what you&rsquo;re looking for, check out our other opportunities and join our talent community. 
&ldquo;I can learn more about Capital Group.&rdquo; 
At Capital Group, the success of the people who invest with us depends on the people in whom we invest. That&rsquo;s why we offer a culture, compensation and opportunities that empower our associates to build successful and prosperous careers. Through nine decades, our goal has been to improve people&rsquo;s lives through successful investing. We know that our history is a testament to the strength of the people we hire. More than 9,000 associates in 30+ offices around the world help our clients and each other grow and thrive every day. Find us on LinkedIn, Instagram, YouTube and Glassdoor.&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
New York Base Salary Range: $168,924-$270,278
&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
&lrm;
 &lrm;
 &lrm;
 &lrm;
In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital&rsquo;s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.
You can learn more about our compensation and benefits here.<ul><li>Temporary positions in the United States are excluded from the above mentioned compensation and benefit plans.</li></ul> 
We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.</div>

Paylocity

<div>Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture.
While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.
We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it&rsquo;s career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.
Help Paylocity enhance communication and enable employees to connect, collaborate, and create from anywhere with a position in Product &amp; Technology!
Want to develop the strategies and principles needed to deliver compelling software? Join our team and help us enhance our all-in-one software platform, elevate our one-of-a-kind technology, and improve the employee experience.
Take your career to the next level at one of G2's Top 100 Software Companies. Explore our Product &amp; Technology positions to see where you fit!
This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements. You must be available five days per week during designated work hours. The work arrangement for this role is subject to change based on business needs and individual performance. This may include adjustments to on-site requirements or schedule expectations, as necessary. 
Position Overview
The DevSecOps Engineer is responsible for understanding and providing guidance to internal teams on best practices in software security and architecture for Paylocity&rsquo;s Information Systems. Responsibilities will also include development and maintenance of internal application security tools, performing static and dynamic analysis of our web and mobile applications.
Primary Responsibilities
The below represents the primary duties of the position, others may be assigned as needed. To perform this 
job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements 
listed below are representative of the knowledge, skill, and/or ability required. Reasonable 
accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Develop and maintain internal application security tooling.</li><li>
Integrate security into the build/deployment process.
</li><li>Promote a proactive approach to addressing the changing threat landscape by recommending and implementing architectural improvements to security infrastructure.
</li><li>Provide expert guidance and recommendations for strategic and tactical security architecture topics through risk advisory services.
</li><li>Assist developers in remediating vulnerabilities by providing line-by-line guidance.
</li><li>Provide training and education to developers on software security best practices in various cloud-based systems.</li></ul>
Education and Experience<ul><li>
Bachelors&rsquo; Degree in InfoSec, Computer Science, or a related discipline required
</li><li>Minimum 3 years&rsquo; experience with full-stack web development.
</li><li>Experience developing and working with Web APIs.</li><li>
Experience with scaling secure-by-design security solutions for developers.
</li><li>Experience interpreting results from Static Code Scanning tools and third party dependency scanning tools</li><li>
Strong knowledge of Security Token Services, Federated Identity Providers, SAML 2.0, claims-based security and other SSO technologies.
</li><li>Experience in remediating security vulnerabilities beyond OWASP Top 10.
</li><li>Experience in assessing security of native and hybrid mobile applications beyond the use of automated tools.
</li><li>Strong experience developing in Python.</li><li>
Experience developing in .NET is a plus.
</li><li>Functional knowledge of container-based application infrastructure with Docker is a plus.
</li><li>Experience working with Payroll, HR, Time &amp; Labor Management, and Online Benefits Enrollment applications is a plus.
</li><li>Experience with writing opensource security tools, presenting at security conferences, writing technical research papers or publishing CVEs is a plus.
</li></ul>Physical requirements<ul><li>
Ability to sit for extended periods: The role requires sitting at a desk or workstation for long periods, typically 7-8 hours a day.</li><li>
Use of computer and phone systems: The employee must be able to operate a computer, use phone systems, and type. This includes using multiple software programs and inquiries simultaneously.</li></ul>
Paylocity is an equal-opportunity employer. Paylocity is committed to the full inclusion of all individuals. We recruit, train, compensate, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. At Paylocity, we believe diversity makes us better.
We embrace and encourage our employees&rsquo; differences in age, culture, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion or spiritual belief, sexual orientation, socio-economic status, veteran status, and other characteristics that make our employees unique. We actively cultivate these differences through our employee resource groups (ERGs), employee experiences, perspectives, talents, and approaches to drive innovation in the software and services we provide our customers.
We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. To request reasonable accommodation in the job application or interview process, please contact accessibility@paylocity.com. This email address is exclusively designated for such requests, aligning with federal and state disability laws. Please do not send resumes to this email address, as they will be removed.
The pay range for this position is $100k - $141k/yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. This position is eligible for an annual bonus based on individual performance in addition to a full range of benefits . This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Base pay information is based on market location. Applicants should apply via www.paylocity.com/careers.</div>

Search 7165+ Devsecops engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

7165 devsecops engineer jobs Near Me

DevSecOps Engineer

Senior DevSecOps Engineer

Senior DevSecOps Engineer

DevSecOps Engineer

DevSecOps Engineer

Senior DevSecOps Engineer

DevSecOps Engineer