Cyber Defense DevSecOps Engineer

Regions Bank is a financial services company seeking a Cyber Defense DevSecOps Engineer to advance its cloud strategy. The role develops secure, automated CI/CD pipelines, supports cloud deployments and infrastructure automation, and collaborates with architecture, security, delivery, and quality teams. It also supports endpoint security operations, incident response, vulnerability remediation, and cybersecurity compliance.

Responsibilities:

• Assists with releasing candidate CI/CD pipelines as a mechanism to communicate the states and steps necessary to determine a release candidate for each application and service
• Designs and develops fully autonomous CI/CD pipelines which facilitate cloud deployments which includes automation of all infrastructure, services and application build and deployment
• Ensures that all parts of the pipeline follow good software engineering practices to include automated tests and infrastructure tests
• Builds tools which reduce errors and improve our overall customer experiences
• Assists in troubleshooting of production issues and ensure pipeline and infrastructure produces clear documentation and metrics which enables Root Cause Analysis
• Develops and tests – Ansible Playbooks, Terraform Scripts, Packer Scripts and establish immutable infrastructure such that patches are an artifact of the past
• Works with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable the organization to move to the cloud using complete automation
• Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices
• Administer and maintain enterprise endpoint detection and response (EDR), endpoint privilege management (EPM), and secure browser/secure access platforms to support cyber defense operations
• Monitor, investigate, and respond to security events, alerts, and incidents across endpoints, user environments, and remote access technologies
• Implement security policies, system configurations, and access controls to enhance endpoint protection and reduce organizational risk
• Develop, automate, and maintain security workflows, integrations, and operational processes using PowerShell and Python scripting
• Utilize Git-based source control platforms to manage code, configuration baselines, and Infrastructure-as-Code (IaC) repositories
• Create and maintain Ansible playbooks and automation solutions to streamline security administration, deployments, and remediation activities
• Collaborate with engineering, operations, and security teams to design, test, and improve cyber defense capabilities within a DevSecOps environment
• Develop technical documentation, standard operating procedures (SOPs), and security implementation guides to support ongoing operations and compliance requirements
• Analyze system and security telemetry to identify threats, vulnerabilities, and opportunities for continuous improvement
• Support vulnerability remediation, configuration management, and security hardening initiatives across enterprise systems and platforms
• Prior SOC, Incident Response, Threat Hunting, or Cyber Defense Operations experience preferred

Requirements:

• High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security or Information Technology
• Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
• Excellent knowledge of Cloud infrastructure, networking, services, and cloud architectural patterns; specifically, compute using virtual machines, managed infrastructure, containers, serverless, as well as database services, security services, and application services
• Proficient in python programming language
• Understanding of Shift Left principles and facilitation technologies
• Applicants for this position must currently be authorized to work in the United States on a full-time basis
• Two (2) years of relevant DevSecOps experience
• AWS DevOps certification or Azure DevOps certification
• Experience in building / deploying cloud native applications – OpenShift, Azure Kubernetes Service (AKS)
• Experience with interfacing with secrets management solutions like Hashicorp Vault
• Familiar with implementing Chaos engineering principles in the pipeline to determine weak links and suggest solutions
• Familiar with testing tools used to facilitate automation and integration of the tools into CI/CD pipelines
• Working Knowledge of Jenkins, Azure DevOps, Ansible, Terraform, Packer, Git, ServiceNow a big plus
• Prior SOC, Incident Response, Threat Hunting, or Cyber Defense Operations experience preferred