DevSecOps Engineer

OPSWAT , a global leader in IT, OT , and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

The Position

We are seeking a hands-on DevSecOps Engineer to embed automated security into software delivery. The role focuses on CI/CD security, security scanning, risk-based gates, Secure SDLC baselines, and vulnerability remediation across product and internal engineering teams.

You will partner with AppSec, Product Engineering, Platform/SRE, and Security Operations to deliver reusable controls, developer-friendly feedback, and measurable security outcomes.

Core Responsibilities

Integrate secret scanning, SAST, SCA/SBOM, container, IaC, and appropriate DAST checks into pull request, build, and release workflows.

Implement risk-based CI/CD security gates, false-positive handling, and documented exceptions.

Build scripts and API integrations for scan aggregation, ticketing, evidence collection, and security reporting.

Maintain visibility into scan coverage, gate decisions, vulnerability trends, and control adoption.

Enable Product Security, Security Champions, and SRE teams; use AI tools responsibly to accelerate analysis, scripting, and documentation while verifying outputs.

Required Qualifications

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.

3+ years in DevSecOps, DevOps/platform engineering, AppSec, or software engineering with security automation.

Hands-on experience with Git and CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps).

Ability to automate workflows using Python, Bash, or similar languages and work with APIs.

Experience with security scanning (e.g., SAST, SCA, secrets, containers, IaC, DAST), finding triage, and remediation.

Working knowledge of Secure SDLC, Linux, containers, cloud fundamentals, and OWASP Top 10.

Strong developer collaboration skills and ability to use AI assistants effectively, with appropriate review of generated outputs.

Preferred Qualifications

Experience with Kubernetes, Terraform, AWS/Azure, and container build/release workflows.

Exposure to tools such as CodeQL, Semgrep, SonarQube, Snyk, Trivy, Gitleaks, Checkov, or ZAP.

Knowledge of SBOM, software supply-chain security, signing/attestation, or OWASP SAMM/NIST SSDF.

Experience with AI-assisted SDLC (AI-SDLC), such as AI coding assistants, AI-driven security reviews, or remediation automation, is a plus.

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.