DevSecOps Engineer

About Us

Alexa Cybersecurity helps organizations protect their infrastructure, applications, AI environments and sensitive data. Our engineers work with customers and technology partners to turn security requirements into practical, maintainable controls.

Position Overview

We are hiring a DevSecOps Engineer to bring application security into everyday engineering and delivery workflows. You will work with developers, security teams and infrastructure engineers to implement automated testing, secure build and release pipelines, and help teams remediate vulnerabilities without creating unnecessary delivery friction. The role combines hands-on implementation, customer integration, troubleshooting and clear technical documentation.

Key Responsibilities

• Design, implement and maintain secure CI/CD workflows using platforms such as GitHub Actions, GitLab CI, Jenkins or Azure DevOps.
• Integrate SAST, DAST, software composition analysis, secrets detection, container image scanning and infrastructure as code checks into development and release workflows.
• Deploy and integrate application security platforms such as Veracode, including repository onboarding, pipeline integration, policy configuration and reporting.
• Triage scan findings with development teams, validate exploitability, reduce false positives and prioritize remediation using severity, exposure and business impact.
• Secure build runners, artifact registries and deployment credentials with least privilege, short-lived access, secrets management and auditable approvals.
• Harden container and Kubernetes workloads, including image provenance, workload identities, network policies and runtime configuration.
• Develop reusable infrastructure and security automation with Terraform, Ansible, Python or shell scripts, with version control and peer review.
• Support threat modeling, secure design reviews and remediation verification for web applications, APIs and cloud services.
• Document integration designs, runbooks and operational handovers, and communicate findings clearly to customers and engineering teams.
• Measure remediation progress and pipeline security coverage, and improve controls without silently bypassing security gates.

Qualifications

• At least 3 years of relevant experience in DevOps, platform engineering, application security or DevSecOps, with hands-on delivery examples.
• Practical experience with Git, CI/CD pipelines, Linux administration and scripting in Python, Bash or an equivalent language.
• Working knowledge of application security testing, common web and API vulnerabilities, dependency risks and secure software development practices.
• Experience with containers and Kubernetes, including troubleshooting workloads, configuration, networking and access controls.
• Experience with at least one major cloud platform and infrastructure as code, including IAM, networking, encryption and audit logging.
• Ability to investigate security findings, explain their impact and collaborate with developers on practical fixes.
• Professional English communication skills for technical documentation, partner discussions and customer delivery.
• Respect for customer confidentiality, approved access boundaries and change management procedures.

Preferred Experience

What We Offer

• Hands-on work across application security, cloud engineering and enterprise delivery.
• Collaboration with Alexa engineers, customer teams and technology partners.
• Opportunities to deepen expertise in security automation and secure software delivery.
• Compensation, benefits and working arrangements will be discussed during the interview process.