DevSecOps Security Engineer

Synkriya Tech is seeking a DevSecOps Security Engineer to support a mission-critical automation platform in the air traffic management domain. The role integrates automated security controls into CI/CD pipelines, strengthens Kubernetes security, and ensures secure software delivery.

Responsibilities:

• Integrate SAST, DAST, SCA, container scanning, and IaC security scanning into CI/CD pipelines
• Implement security gates, artifact signing, provenance verification, and SBOM generation
• Secure Kubernetes and container environments through RBAC, network policies, admission controls, and hardening
• Perform vulnerability assessment, CVE triage, remediation, and security automation
• Implement secrets management, policy-as-code, and cloud security controls
• Support security evidence generation, incident response, and root cause analysis

Requirements:

• 4+ years of relevant experience and a bachelor's degree or equivalent combination of education and experience
• Hands-on experience with Kubernetes, Docker, CI/CD, and automated security scanning
• Tools: Trivy, Grype, Nessus, Qualys, GitLab CI, GitHub Actions, or Jenkins
• Scripting with Python, Bash, or Go
• Experience with HashiCorp Vault or equivalent secrets management
• Knowledge of NIST 800-53 and AWS/Azure security
• U.S. citizenship is required
• Security+ CE, CySA+, CKA, or CKS certifications
• OPA/Rego, Kyverno, Terraform security scanning, and GitOps tools such as ArgoCD or Flux
• Knowledge of software supply chain security, SLSA, Sigstore/cosign, and service mesh security
• Experience in aviation, FAA, or other safety-critical environments