DevSecOps Engineer

The DevSecOps Full Stack Security Engineer is responsible for designing, engineering, and delivering security products and platforms from the ground up - architecting end-to-end solutions (front-end, back-end, APIs, data pipelines, and cloud infrastructure) that automate security requirements/processes. This role is responsible to leverage AI/ML wherever feasible to build intelligent automation into security tooling, including vulnerability triage, risk scoring, anomaly detection, and self-service security workflows, while embedding security best practices across the SDLC.

• Design, build, and maintain full stack security products (UI, APIs, web services, data layer) from concept through production deployment
• Leverage AI/ML to automate security processes/requirements
• Write clean, secure, well-tested, and maintainable code following secure coding principles and industry best practices
• Participate in architecture and code reviews; ensure Zero Trust principles and DevSecOps guardrails are embedded in product design
• Collaborate cross-functionally with DevSecOps engineers, product delivery teams, and platform teams to translate roadmap items into engineering deliverables
• Troubleshoot, debug, and optimize applications for performance, scalability, and reliability
• Stay current with emerging AI capabilities, cloud-native technologies, and security engineering trends; evaluate and prototype new tools/frameworks
• Document technical designs, APIs, and operational runbooks; contribute to internal knowledge sharing and training
• Power-user of AI coding/productivity tools (Codex, Claude, open code, etc.) to boost speed and quality
• Apply strong working knowledge of Agile practices—including sprint planning, daily standups, and retrospectives—to drive effective team execution
• Demonstrate curiosity and initiative in learning new tools, frameworks, and security concepts, including opportunities to apply AI to engineering problems
  
  Skillset required:
• Proficiency in front-end frameworks (Angular, TypeScript, React) and back-end technologies/languages (Java/Spring Boot, Python)
• Exposure to DevOps tooling, including Tekton, Cloud Build, GitHub, GitHub Actions, Artifactory, Docker, along with Infrastructure-as-Code tools such as Terraform
• Experience in designing and implementing CI/CD pipelines using platforms such as Tekton, GitHub Actions, and Cloud Build to streamline and automate the software delivery lifecycle
• Hands-on experience with relational and cloud-based database technologies, including Google BigQuery, PostgreSQL
• Demonstrated experience with cloud platforms, preferably Google Cloud Platform (Big Query, Cloud Run, GKE, etc.) or any other cloud platforms (Azure/AWS)

• Excellent verbal and written communication skills, with the ability to translate complex technical concepts for diverse audiences; proven ability to collaborate effectively with security teams, product managers, and cross-functional engineering teams

• Bachelor (undergraduate) degree in a relevant field (Computer Science, Software Engineering, Security, or others) OR an equivalent combination of education, training, and experience
• Minimum of 4+ years of full stack software engineering experience, ideally with exposure to security products, DevSecOps tooling, or cloud-native platform , full stack developer experience