Loading
Hire.Monster

Staff Engineer - DevSecOps

Groveport, Ohio, US
ОфисDevOpsСША

Обязанности

  • Build security into every release—and grow into leadership with full support
  • You’ll design the pipelines, tools, and guardrails that let developers ship fast and safe
  • You’ll go deep technically while gaining visibility across engineering, product, and leadership
  • You’ll drive how applications move from code to production—integrating security into CI/CD, shaping cloud architecture, and setting standards teams rely on
  • As you embed yourself with squads, you’ll build the influence to lead initiatives, not just implement them
  • Your work will secure more than systems—it will shape how the business delivers software with confidence
  • You’ll work across multiple clouds (Azure, GCP), modern CI/CD platforms, and the latest security tooling—covering everything from runtime protection to code scanning—staying sharp through continuous learning and real-world challenges
  • Designing and operating secure CI/CD pipelines with automated testing, SAST/DAST scanning, dependency checks, and secrets detection
  • Implementing and tuning cloud security tools to monitor posture, runtime, and code security, ensuring continuous compliance and risk reduction
  • Driving API security best practices and runtime protection across services and microservices
  • Building and maintaining cloud infrastructure security controls using Terraform, Kubernetes, and container security best practices
  • Embedding security into development workflows by partnering directly with product and engineering teams
  • Monitoring vulnerabilities, triaging incidents, and driving rapid response across services and environments

Setting policies and standards that balance speed of delivery with strong security posture

Требования

  • Strong problem-solving skills with both strategic and hands-on depth in DevOps or security engineering
  • Solid understanding of cloud security concepts (IAM, network segmentation, secrets management) across Azure or GCP
  • Hands-on familiarity with cloud security platforms such as Prisma Cloud and endpoint protection solutions like CrowdStrike for posture, runtime, and code analysis
  • Experience implementing API security controls and embedding security practices throughout the software development lifecycle
  • Confidence communicating security priorities with developers, stakeholders, and executives

Background in Computer Science, Security, or equivalent practical experience

Навыки

Experience with CI/CD tools (GitHub Actions, Jenkins, or similar) and at least one scripting language (Python, Bash, Go, etc.)

Опубликовано: 04.01.2026