Lead the adoption of a secure software development lifecycle (S-SDLC) framework across North American development teams, combining hands-on security tool expertise with mentorship and cross-functional collaboration with global headquarters teams.
Locations (3)
New York, New York, United States
Paris, Île-de-France, France
Porto, Portugal
Responsibilities
Help AMER development teams adopt and implement the headquarters-designed S-SDLC framework, with a focus on Checkmarx integration and best practices
Mentor and support junior security engineers and developers in application security concepts and tool usage
Conduct training sessions and workshops to build developer security awareness and remediation capabilities across the organization
Manage vulnerability remediation workflows, including false-positive tuning and prioritization of security findings
KBR is seeking a Senior DevOps Engineer to join our team in El Segundo, CA. The role involves leading release management, designing security and compliance controls, and deploying DevOps practices across multiple projects in a space communications environment.
Compensation
For California only, the salary range for this position is approximately $126,900 - $158,600. The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.
Responsibilities
Lead release management and deployment of microservices in a Kubernetes environment (AWS EKS, Azure AKS).
Design and implement vulnerability management, security monitoring, compliance controls, and incident response automation.
Work with developers to implement secure coding practices and application security testing.
Deploy DevOps practices for automating the software engineering practices across multiple projects.
Ensure solid foundational processes are in place.
Requirements
Bachelor's degree in engineering or computer science
Nice to have: Active Secret clearance
Nice to have: Master’s degree in engineering or computer science
Nice to have: CI/CD on classified software development networks
Lead – Cloud Security & DevSecOps to own the security posture of our AWS cloud platform and CI/CD pipelines, while supporting, designing, and implementing scalable, secure, and reliable infrastructure and DevOps practices.
Responsibilities
Own and continuously improve the AWS security posture across accounts, VPCs, IAM, KMS, Secrets Manager, WAF, CloudTrail and Control Tower.
Be accountable for the end-to-end vulnerability management lifecycle: discovery, risk-based prioritisation, remediation, verification and reporting.
Define, implement and monitor preventative guardrails, Service Control Policies (SCPs) and AWS Config conformance packs across all accounts.
Integrate and maintain security checks in GitLab CI/CD, including SAST, DAST, SCA, secret detection, container image scanning and IaC scanning.
Harden and secure workloads on ECS, EKS and RDS, covering hardened container image baselines (CIS), RBAC, network policies and end-to-end encryption.
Lead - Cloud Security & DevSecOpsenergytec.ai · Hyderabad, India