AL
Senior DevSecOps Engineer
Artech LLC
🇺🇸 United States
On-site
Senior
4 weeks ago
$45 – $53 / hour
- DevSecOps
- Python
- Java
- Vulnerability Management
- Devops
- CI/CD
- Terraform
- CodeQL
- GitHub
- triage
- GCP
4 weeks ago
Title: Senior DevSecOps Engineer
Locations: Onsite: Bellevue, WA - Onsite
Duration: 6 Months
Pay rate: $40-$53/hr on W2/C2C
Skills: Python & Java Solutions, DevSecOps, OSS Security Engineering, Open-Source Software Security; Client - Vulnerability Management; Secure coding Practices; DevOps Continuous Integration and Continuous Delivery (CI/CD); Security automation; Security Tooling Integration, Terraform; CodeQL; GitHub Advanced Security; Cloud Security; Security Engineering
Experience Required:8-10
Role Descriptions:
- We are seeking a highly skilled and security-focused Senior DevSecOps Engineer to join the Akrites OSS Security Engineering team. This role is responsible for securing the open-source software ecosystem by analyzing| validating| and remediating vulnerabilities identified across critical OSS components and services.
- The engineer will work at the intersection of software engineering| security engineering| and cloud operations to strengthen software supply chain security and improve the security posture of open-source technologies.
- The ideal candidate possesses strong expertise in Java| Python| DevSecOps practices| vulnerability management| automation engineering| and cloud-native platforms| with a passion for driving secure development and operational excellence.
- This position will collaborate closely with Client security engineering teams| open-source maintainers| and cross-functional product engineering groups to deliver scalable security solutions and sustainable remediation strategies.
- OSS Vulnerability Analysis and Remediation
- Analyze| triage| validate| and prioritize Open Source Software (OSS) vulnerabilities identified through security scanning platforms| Software Composition Analysis (SCA) tools| and vulnerability intelligence feeds.
- Perform technical investigations to determine exploitability| business impact| attack vectors| and remediation requirements.
- Develop and implement vulnerability fixes across OSS components using Java and Python| ensuring secure coding practices and compliance with security standards.
- Conduct root cause analysis for recurring vulnerabilities and recommend long-term mitigation strategies.
- Validate remediation effectiveness through code reviews| testing| proof-of-concept verification| and security assessment techniques.
- Secure Software Supply Chain Engineering
- Strengthen software supply chain security through dependency management| secure package validation| and vulnerability governance practices.
- Partner with engineering teams to evaluate and remediate risks associated with third-party libraries| frameworks| and open-source dependencies.
- Support coordinated vulnerability disclosure and remediation workflows while maintaining confidentiality and security compliance.
- Contribute to vulnerability response activities from intake and validation through patch development| testing| and coordinated release processes.
- DevSecOps Platform Engineering Design| implement| and optimize DevSecOps workflows within the Akrites platform deployed on Google Cloud Platform (GCP).Integrate security controls into CI/CD pipelines| enabling automated vulnerability detection| policy enforcement| and remediation tracking.
- Enhance platform reliability| observability| and security through automation| infrastructure monitoring| logging| and operational analytics.
- Collaborate with development teams to embed security practices throughout the Software Development Lifecycle (SDLC).
- Essential Skills: Digital: Terraform; CodeQL; GitHub Advanced Security; Digital: Cloud Security; Security Engineering
• Inclusive and diverse work environment
• Opportunities for professional growth and development
• Comprehensive health and wellness benefits
Senior DevSecOps Engineer · Artech LLC