West 4th Strategy, LLCRemote
DevSecOps Engineer
United States of America
Full Time
2 hours ago
$120,000 - $140,000 USD
No H1B
Key skills
AWS cloud environmentsInfrastructure as Code (IaC)VeracodeBurp SuiteCI/CD pipelinesGitHub ActionsStatic code analysisDependency analysisContainer scanningSecurity patchingCertificate managementVulnerability remediationContinuous cloud security monitoringLoggingPipeline AutomationSecurity Tooling IntegrationContainer management - DockerIaC tools - TerraformIaC tools - AnsibleCloud security - IAM and least-privilege enforcementAutomation scriptingPythonJavaCoachingGoAIAWSTerraformDockerAnsibleIAMGitHubCI/CDCloud Security
About this role
West 4th Strategy, LLC is seeking an experienced DevSecOps Engineer at the U.S. Securities and Exchange Commission (SEC). In this role, you will build and secure cloud infrastructure, automate CI/CD pipelines, integrate security tooling across the development lifecycle, and act as a go-to resource for secure coding practices across the development team.
Responsibilities:
- Responsible for building and configuring the system AWS cloud environments using Infrastructure as Code (IaC) best practices and integrating with security tools such as Veracode, Burp Suite to create CI/CD pipelines for deploying security compliant code
- Deploy source code using automated pipelines built on GitHub Actions, incorporating SEC-approved IaC methodologies and adhering to Immutable Architecture principles for all deployments
- Conduct static code analysis, dependency analysis, and container scanning using SEC-approved tooling
- Apply security patches, maintain certificates, and address vulnerabilities on a continuous basis, supporting POA&M remediation and responding to findings from security testing
- Coach developers on secure coding practices, help IT teams safeguard cloud resources, and act as a go-to resource for all things security
- Configure continuous cloud security monitoring and logging to ensure adherence to compliance standards
Requirements:
- Experience building, managing, and securing continuous integration and deployment pipelines using tools like GitHub Actions, GitHub CI
- Hands-on experience automating security checks (SAST, DAST, SCA, and container/IaC scanning) directly into the developer workflow
- Proficiency with container management (Docker) and IaC tools (Terraform, Ansible) to enforce secure-by-default configurations
- Expertise in configuring and securing cloud-native AWS environments, including identity and access management (IAM) and least-privilege enforcement
- Fluency in automation scripting and programming languages such as Python, Java and Java frameworks
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
- U.S. citizenship is required. Dual citizenship is not permitted on this contract
- Ability to obtain SEC public trust
- Some exposure to AI technologies including GitHub Copilot