The Senior Cloud Security and DevSecOps Engineer will own cloud security engineering across operating companies, focusing on strengthening AWS and Azure environments and embedding preventive controls into infrastructure and delivery.
Locations (4)
Scottsdale, Arizona, United States
Dallas, Texas, United States
Charlotte, North Carolina, United States
California, United States
Compensation
Annual year-end bonus eligible
Responsibilities
Assess existing AWS and Azure environments, prioritize inherited security gaps, and deliver a phased remediation roadmap.
Establish reusable baselines and onboarding standards across supported operating companies.
Build and maintain organization-level guardrails through AWS Organizations and Azure management groups, using infrastructure as code and policy as code.
Identify cloud misconfigurations, exposed services and excessive workload permissions.
Establish cloud controls for network exposure, encryption, secrets and audit logging.
Lead technical delivery for Air Force Research Laboratory Space Warfare Directorate, managing teams, processes, and client relationships while ensuring secure coding and mission-critical system integration.
Compensation
Salary range: $135,000.00 - $150,000.00
Responsibilities
Manage and lead team and overall processes for planning, execution and reporting
Perform administrative functions for workforce at Kirtland and assist FSO in onboarding and offboarding employees
Lead and manage subcontract efforts with potential prime contractor at AFRL and Space Force
Serve as software expert in coding scientific algorithms into operational applications
Manage source configuration management, software builds, tests, and application deployment
Domain analyst covering Application Security, Data Security and Cloud Security, plus ownership of the Design Assurance register.
Responsibilities
Perform pre-production reviews for application security tooling including SAST, DAST and SCA, validating against AppSec architecture standards, SDLC integration patterns and API security controls.
Review data security tooling including DLP and data classification against data security architecture standards.
Review cloud security tooling and landing-zone configurations against the cloud security standards — CSPM policy baselines, CIEM entitlement boundaries, key management and network isolation across the Azure and GCP estates — and record where a deviation is an accepted exception rather than a gap.
Keep your review records current in the assurance register, to the evidence standard audit will test.
Run pre-production and business-as-usual reviews across Application Security, Data Security and Cloud Security, escalating cross-domain and precedent-setting designs to senior review.
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience
Lead and manage the organization’s security initiatives, focusing on secure software development lifecycle, vulnerability management, and strategic leadership.
Responsibilities
Strategically lead and manage vulnerability management and application security programs
Oversee integration of security practices within the SDLC
Plan and coordinate annual penetration testing activities
Lead and mentor a team of security professionals
Conduct IT compliance assessments and reviews
Requirements
Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field
Nice to have: Banking or financial services sector experience
Nice to have: Cloud security architectures and services
Lead the platform engineering organization to build and run a global platform for managing government ID and ID-enabled services, driving technical direction, delivery, reliability, security, and adoption.
Responsibilities
Set technical direction and review designs for Azure, Kubernetes/OpenShift and other cloud environments
Establish reusable deployment patterns and go-live standards using GitOps, CI/CD and infrastructure automation
Diagnose complex production failures and drive lasting fixes
Embed security gates, SBOMs, image signing, SAST/DAST and automated SOC 2/ISO 27001 evidence into delivery
Support spec-driven development and enhance agents for delivery, change preparation, incident triage, runbook automation, and human approval with audit trails
Requirements
Bachelor's degree in Computer Science, Engineering or a related field
Leading the Security Engineering function to establish technical capabilities, platforms, automation, and engineering practices to protect the organization at scale. The role combines technical leadership, people leadership, and hands-on security engineering.
Responsibilities
Lead and develop the Security Engineering team, providing technical direction, priorities, and accountability.
Coach and mentor Security Engineers and Senior Security Engineers.
Establish engineering principles, standards, and ways of working.
Own and prioritise the Security Engineering backlog based on organizational risk and value.
Build a culture of engineering excellence, automation, ownership, collaboration and continuous improvement.
Lead offensive security research to develop and tune detection logic for AI-driven SDLC, collaborating with engineers, researchers, and AI/data scientists.
Responsibilities
Push modern AppSec forward by building and breaking detection logic
Collaborate with engineers, researchers, and AI/data scientists on next-generation detection
Take research ideas from prototype to production with minimal guidance
Explain complex attack paths to engineers and product managers