ZipRecruiter

Log In

1

Devsecops Security Engineer Jobs (NOW HIRING)

Wilcore Technologies

DevSecOps Engineer

$120K - $130K/yr

The DevSecOps/Security Engineer will collaborate closely with engineers, security teams, product leadership, and external stakeholders to strengthen the program's cloud infrastructure, automate ...

Wilcore Technologies, Inc.

The DevSecOps/Security Engineer will collaborate closely with engineers, security teams, product leadership, and external stakeholders to strengthen the program's cloud infrastructure, automate ...

Wilcore Technologies

DevSecOps Engineer

Stafford, VA · On-site

$120K - $130K/yr

The DevSecOps/Security Engineer will collaborate closely with engineers, security teams, product leadership, and external stakeholders to strengthen the program's cloud infrastructure, automate ...

Apex Systems

DevSecOps Assessor

Richmond, VA · On-site

DevSecOps & Security Automation * Implement and maintain application security testing capabilities ... Serve as a security advisor to engineers, architects, product teams, and other stakeholders.

previous pagenext page

Showing results 21-40

All JobsDevsecops Security Engineer Jobs

Devsecops Security Engineer information

See salary details

$61.5K

$152.8K

$205.5K

How much do devsecops security engineer jobs pay per year?

As of Sep 10, 2026, the average yearly pay for devsecops security engineer in the United States is $152,773.00, according to ZipRecruiter salary data. Most workers in this role earn between $143,000.00 and $158,500.00 per year, depending on experience, location, and employer.

What is the difference between Devsecops Security Engineer vs Cloud Security Engineer?

AspectDevsecops Security EngineerCloud Security Engineer
CertificationsCompTIA Security+, CISSP, AWS/Azure certificationsCCSP, AWS/Azure security certifications
Work EnvironmentDevOps teams, CI/CD pipelines, software development environmentsCloud platforms, cloud infrastructure, security architecture
Industry UsageTech companies, software development firms, organizations adopting DevSecOpsOrganizations utilizing cloud services, cloud providers, SaaS companies

Devsecops Security Engineers focus on integrating security into DevOps processes, working closely with development and operations teams. Cloud Security Engineers specialize in securing cloud infrastructure and services. While both roles require cloud and security certifications, Devsecops Security Engineers emphasize secure software development, whereas Cloud Security Engineers concentrate on cloud environment security.

What cities are hiring for Devsecops Security Engineer jobs?

Cities with the most Devsecops Security Engineer job openings:

What states have the most Devsecops Security Engineer jobs?

States with the most job openings for Devsecops Security Engineer jobs include:

What are popular job titles related to Devsecops Security Engineer jobs?

For Devsecops Security Engineer jobs, the most frequently searched job titles are:

DevSecOps Engineer

Remote

Wilcore Technologies
See more jobs at Wilcore Technologiesexternal

$120K - $130K/yr

Full-time

Posted 19 days ago

Job description

We are hiring a DevSecOps to support a pivotal federal program making a positive impact on millions of Americans' daily lives.
This is a hands-on engineering role for someone who can combine DevSecOps expertise with practical cybersecurity and remediation experience. The DevSecOps/Security Engineer will collaborate closely with engineers, security teams, product leadership, and external stakeholders to strengthen the program's cloud infrastructure, automate secure development practices, address security findings, and achieve and maintain an Authorization to Operate (ATO).
What You'll Be Doing
  • Design, implement, maintain, and document secure CI/CD pipelines using modern DevSecOps practices.
  • Develop and maintain Infrastructure as Code (IaC) solutions using AWS CloudFormation.
  • Build, configure, secure, and support AWS environments and serverless computing services.
  • Integrate security controls, vulnerability scanning, and automated compliance checks throughout the software development lifecycle.
  • Establish vulnerability patching and remediation plans and work directly with engineers to resolve identified findings.
  • Develop and execute actionable Plans of Action and Milestones (POA&Ms), including priorities, owners, dependencies, target completion dates, and measurable milestones.
  • Proactively track POA&M progress, identify blockers, and communicate changes to projected remediation timelines.
  • Assess new security findings as they are identified and determine their scope, severity, ownership, dependencies, and required remediation actions.
  • Identify duplicate, overlapping, inherited, or externally owned findings to prevent unnecessary remediation efforts.
  • Determine when findings are outside the program's control or result from externally imposed technical constraints and coordinate appropriate risk-acceptance or disposition requests.
  • Develop level-of-effort estimates for core program POA&Ms and help prioritize remediation activities based on risk, effort, dependencies, and operational impact.
  • Maintain an accurate, real-time dashboard or tracker for security findings, POA&Ms, remediation activities, risks, dependencies, owners, and target dates.
  • Conduct or support Security Impact Assessments (SIAs) for proposed system, infrastructure, application, and configuration changes.
  • Support activities required to achieve and maintain an ATO while ensuring program operations adhere to applicable federal software-development and cybersecurity requirements.
  • Help reduce the program's administrative and operational burden associated with managing ATOs and POA&Ms through automation, documentation, and repeatable processes.
  • Implement Zero Trust best practices, including data tagging and other mechanisms that improve data tracking, classification, and sensitivity management.
  • Collaborate with DevOps engineers to establish secure, modern development and data-science environments.
  • Engage proactively with developers, infrastructure engineers, security personnel, product owners, program leadership, and external stakeholders to drive findings through resolution.
  • Create and maintain technical documentation, remediation evidence, operating procedures, implementation plans, and security-related artifacts.
  • Support and secure Linux-based development and production environments.
  • Investigate Docker containers, container images, configurations, dependencies, and potential security vulnerabilities.
  • Participate effectively in an Agile software-development environment.
  • Perform other related duties as assigned.

What You'll Bring
  • Hands-on experience designing, developing, and supporting CI/CD pipelines.
  • Experience with GitHub Actions, AWS CloudFormation, Amazon CloudWatch, or comparable technologies.
  • Experience creating, configuring, and supporting AWS services, including ECS, S3, RDS, and Lambda.
  • Experience developing and improving CI/CD scripts and automated services supporting software development and deployment.
  • Experience identifying, assessing, prioritizing, and remediating infrastructure, application, container, and cloud-security vulnerabilities.
  • Demonstrated experience developing vulnerability-patching and remediation plans.
  • Experience managing or supporting POA&Ms, including defining corrective actions, owners, dependencies, milestones, target dates, and closure evidence.
  • Ability to translate security findings into practical engineering tasks and work directly with technical teams through remediation and closure.
  • Experience supporting ATO activities, Security Impact Assessments, or federal security-authorization processes.
  • Knowledge of federal cybersecurity and secure software-development requirements.
  • Experience with Infrastructure as Code and configuration-management practices.
  • Experience supporting and securing Linux-based environments.
  • Experience working with Docker and investigating container configurations and vulnerabilities.
  • Understanding of Zero Trust principles and their application within cloud-based environments.
  • Strong organizational skills and the ability to manage multiple security findings, remediation activities, dependencies, and deadlines simultaneously.
  • Ability to develop realistic plans of action and level-of-effort estimates in an environment where requirements and priorities may change.
  • Strong analytical skills, including the ability to identify duplicate findings, ownership boundaries, inherited risks, and external dependencies.
  • Proactive communication skills and the ability to engage engineers, security teams, program leaders, and external stakeholders without waiting for issues to escalate.
  • Ability to maintain accurate dashboards, trackers, documentation, and status reports.
  • A collaborative mindset and the ability to work successfully with multidisciplinary teams of developers, engineers, managers, security professionals, and product managers.
  • A security-first mindset and the ability to keep infrastructure, application, and data security at the forefront of engineering decisions.
  • Experience working as part of an Agile software-development team.

Preferred Qualifications
  • Experience supporting federal government systems or programs.
  • Experience working with federal security frameworks, authorization requirements, and continuous-monitoring processes.
  • Experience supporting ATO maintenance and POA&M remediation in an AWS cloud environment.
  • Familiarity with federal Zero Trust initiatives and data-classification or data-tagging practices.
  • Experience implementing automated security testing, vulnerability scanning, compliance validation, or policy enforcement within CI/CD pipelines.

Employment Requirements
  • Applicants must be authorized to work in the United States.
  • In alignment with federal contract requirements, certain positions may require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or security clearance.

Requirements
What You'll Bring
  • Hands-on experience designing, developing, and supporting CI/CD pipelines.
  • Experience with GitHub Actions, AWS CloudFormation, Amazon CloudWatch, or comparable technologies.
  • Experience creating, configuring, and supporting AWS services, including ECS, S3, RDS, and Lambda.
  • Experience developing and improving CI/CD scripts and automated services supporting software development and deployment.
  • Experience identifying, assessing, prioritizing, and remediating infrastructure, application, container, and cloud-security vulnerabilities.
  • Demonstrated experience developing vulnerability-patching and remediation plans.
  • Experience managing or supporting POA&Ms, including defining corrective actions, owners, dependencies, milestones, target dates, and closure evidence.
  • Ability to translate security findings into practical engineering tasks and work directly with technical teams through remediation and closure.
  • Experience supporting ATO activities, Security Impact Assessments, or federal security-authorization processes.
  • Knowledge of federal cybersecurity and secure software-development requirements.
  • Experience with Infrastructure as Code and configuration-management practices.
  • Experience supporting and securing Linux-based environments.
  • Experience working with Docker and investigating container configurations and vulnerabilities.
  • Understanding of Zero Trust principles and their application within cloud-based environments.
  • Strong organizational skills and the ability to manage multiple security findings, remediation activities, dependencies, and deadlines simultaneously.
  • Ability to develop realistic plans of action and level-of-effort estimates in an environment where requirements and priorities may change.
  • Strong analytical skills, including the ability to identify duplicate findings, ownership boundaries, inherited risks, and external dependencies.
  • Proactive communication skills and the ability to engage engineers, security teams, program leaders, and external stakeholders without waiting for issues to escalate.
  • Ability to maintain accurate dashboards, trackers, documentation, and status reports.
  • A collaborative mindset and the ability to work successfully with multidisciplinary teams of developers, engineers, managers, security professionals, and product managers.
  • A security-first mindset and the ability to keep infrastructure, application, and data security at the forefront of engineering decisions.
  • Experience working as part of an Agile software-development team.

Preferred Qualifications
  • Experience supporting federal government systems or programs.
  • Experience working with federal security frameworks, authorization requirements, and continuous-monitoring processes.
  • Experience supporting ATO maintenance and POA&M remediation in an AWS cloud environment.
  • Familiarity with federal Zero Trust initiatives and data-classification or data-tagging practices.
  • Experience implementing automated security testing, vulnerability scanning, compliance validation, or policy enforcement within CI/CD pipelines.

Employment Requirements
  • Applicants must be authorized to work in the United States.
  • In alignment with federal contract requirements, certain positions may require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or security clearance.

Salary Description
$120,000.00 - $130,000.00

Apply