Become a key player in our Information Security team as a Senior DevSecOps Engineer, where you will leverage your expertise in application security and security engineering to support and enhance our code scanning and finding management processes. This role involves the implementation and administration of application security tooling, integration of scanning into CI/CD pipelines, and building or implementing automated finding management technologies to facilitate developer remediation activities. 

This position can be virtually anywhere in the U.S.

Responsibilities:

• Implementing and maintaining Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) to identify vulnerabilities and configuration issues during the software development lifecycle. 

• Implementing and maintaining tools (such as Application Security Posture Management / ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows. 

• Integrating security tooling with large-scale enterprise CI/CD pipelines. 

• Building and managing tooling and processes to drive efficient DevSecOps operations.