Staff DevSecOps Engineer – Product Security

. Design, develop, and deploy self-service security tools and services for the internal security platform .

Posted 10/15/2026full-timeAustin • Texas • United StatesLeadWebsite

Tools & technologies

AnsibleAWSAzureCloudDistributed SystemsGoogle Cloud PlatformJavaJavaScriptJenkinsKubernetesMicroservicesPythonSplunkTerraformTypeScriptVaultGo

Key responsibilities & impact

Design, develop, and deploy self-service security tools and services for the internal security platform
Lead complex security projects, including end-to-end tool development and creation of new platform capabilities
Automate and integrate SAST, DAST, SCA, IAST, and other security controls into CI/CD pipelines and developer workflows
Lead architecture and deployment of secure AWS, Azure, and GCP environments using Infrastructure as Code
Perform security architecture reviews, develop threat models, and provide security-as-code best practices
Collaborate with SRE to embed and maintain automated monitoring and security visibility in production systems
Collaborate with internal security teams on compliance, incident response, and operational security requirements
Develop and drive adoption of security engineering best practices and standards
Evangelize security platform tooling and deliver DevSecOps training and outreach to development and engineering teams
Mentor junior security team members and security advocates in DevSecOps, platform engineering, and secure coding

What you’ll need

BSc/MSc in a related field or equivalent experience
Proven experience designing, developing, and deploying security tools and services used by engineering and security teams
Expertise in DevSecOps principles and practical experience implementing security controls in CI/CD pipelines, including Jenkins, GitLab CI, and GitHub Actions
Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud
Experience with automated network provisioning and secure configuration management
Experience with code review in one or more of Java, Python, Go, or JavaScript/TypeScript
In-depth knowledge of Kubernetes operations and security, including Helm for deployment and policy enforcement
Expertise in Infrastructure as Code and configuration management tools such as Terraform, CloudFormation, or Ansible
Experience with HashiCorp Vault, Splunk, and CrowdStrike or similar EDR solutions
Deep understanding of web service frameworks and distributed architectures, including event-driven, microservices, and serverless systems
Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments against complex distributed systems
Security certifications such as CISSP or CISA are a bonus but not required
Familiarity with Cloudera products or other distributed computing systems is a strong bonus
This role is not eligible for immigration sponsorship

Comp & perks