Devsecops Engineer Jobs
Devsecops engineer jobs are open across financial services, healthcare, government contracting, and technology, from mid-level to staff and principal, with specializations in cloud security automation, container security, and CI/CD pipeline hardening. Find a role that fits from the openings below and apply directly.
Find Devsecops Engineer JobsLooking for remote work? View remote devsecops engineer jobs →Overview
Showing 5 of 355+ Devsecops Engineer jobs
Contributions:
- Help to build our Salesforce DevSecOps Strategy and Practice to integrate cybersecurity into the organizational adoption and improvement of agile practices.
- Partner with Salesforce Engineering team leads to create, implement and apply DevSecOps principles, processes and culture that are consumed by delivery teams across our company.
- Provide subject matter expertise in various risk assessments, working in an Agile environment with an understanding of the full software development life-cycle.
- Advocate for software engineering practices such as unit testing, code reviews, full build testing, quality engineering practices and requirements capturing techniques to the teams to improve end to end secure delivery practices.
- Advocate for and ensure appropriate security practices are communicated and implemented within their projects.
- Partner with development and operations teams to facilitate practical automation solutions and custom modules. Troubleshoot automation issues and when required, engage the resources to find practical solutions that move projects forward in a timely manner.
- Be a trusted automation and tooling adviser for DevSecOps initiatives by providing objective, practical and relevant ideas, insights and advice.
- Assist application teams with on-boarding to the adopted security tools/technologies; working with vendors to troubleshoot the platform and issues related to such integrations.
- Deliver tasks based on project objectives; technically support projects through to completion.
- Ensure deliverables are completed within target time-frames and are consistently of high-quality, documented and support transition of operational activities.
- Work with teams to bring continuous improvement to DevSecOps processes and tools.
- Engineer and implement solutions and provide recommendations for continuous improvement for the services provided
- Present regular status updates and provide cross training to other DevOps team members.
- Be active in evaluating and recommending new technologies to our DevSecOps and Salesforce Practice.
- Ability to obtain a U.S. government Public Trust Security Clearance
- Bachelor's degree: degree in business administration, a technology-related field, or equivalent education-related experience.
Preferred:
- Minimum of 5 years of application DevSecOps Experience with actual/active development experience in an Agile environment.
- Hands on experience integrating Agile software development frameworks such as SAFe with DevSecOps methodologies
- Working knowledge of Git and repository providers such as GitHub, GitLab, Bitbucket
- Experience implementing container and orchestration infrastructure utilizing platforms such as Docker and Kubernetes
- Working knowledge of automated CI/CD build engines such as Jenkins, GitLab CI/CD, GitHub Pipelines, CircleCI, TravisCI
- Experience implementing Automated Testing frameworks including Selenium, as well as Salesforce specific tools such as Provar
- Hands on experience integrating Salesforce deployments with industry standard DevSecOps tooling and orchestration
- Working knowledge of SalesforceDX including package-based development models and scratch-org based development
- Experience working with teams on multi-tiered, complex distributed web applications (Bash Scripting, C#, C++, Java, Python, Perl, PowerShell, etc.).
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate strategic information security topics, policies and standards as well as risk-related concepts to technical and nontechnical audiences at various hierarchical levels.
Identity Statement
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.
Contributions:
- Help to build our Salesforce DevSecOps Strategy and Practice to integrate cybersecurity into the organizational adoption and improvement of agile practices.
- Partner with Salesforce Engineering team leads to create, implement and apply DevSecOps principles, processes and culture that are consumed by delivery teams across our company.
- Provide subject matter expertise in various risk assessments, working in an Agile environment with an understanding of the full software development life-cycle.
- Advocate for software engineering practices such as unit testing, code reviews, full build testing, quality engineering practices and requirements capturing techniques to the teams to improve end to end secure delivery practices.
- Advocate for and ensure appropriate security practices are communicated and implemented within their projects.
- Partner with development and operations teams to facilitate practical automation solutions and custom modules. Troubleshoot automation issues and when required, engage the resources to find practical solutions that move projects forward in a timely manner.
- Be a trusted automation and tooling adviser for DevSecOps initiatives by providing objective, practical and relevant ideas, insights and advice.
- Assist application teams with on-boarding to the adopted security tools/technologies; working with vendors to troubleshoot the platform and issues related to such integrations.
- Deliver tasks based on project objectives; technically support projects through to completion.
- Ensure deliverables are completed within target time-frames and are consistently of high-quality, documented and support transition of operational activities.
- Work with teams to bring continuous improvement to DevSecOps processes and tools.
- Engineer and implement solutions and provide recommendations for continuous improvement for the services provided
- Present regular status updates and provide cross training to other DevOps team members.
- Be active in evaluating and recommending new technologies to our DevSecOps and Salesforce Practice.
- Ability to obtain a U.S. government Public Trust Security Clearance
- Bachelor's degree: degree in business administration, a technology-related field, or equivalent education-related experience.
Preferred:
- Minimum of 5 years of application DevSecOps Experience with actual/active development experience in an Agile environment.
- Hands on experience integrating Agile software development frameworks such as SAFe with DevSecOps methodologies
- Working knowledge of Git and repository providers such as GitHub, GitLab, Bitbucket
- Experience implementing container and orchestration infrastructure utilizing platforms such as Docker and Kubernetes
- Working knowledge of automated CI/CD build engines such as Jenkins, GitLab CI/CD, GitHub Pipelines, CircleCI, TravisCI
- Experience implementing Automated Testing frameworks including Selenium, as well as Salesforce specific tools such as Provar
- Hands on experience integrating Salesforce deployments with industry standard DevSecOps tooling and orchestration
- Working knowledge of SalesforceDX including package-based development models and scratch-org based development
- Experience working with teams on multi-tiered, complex distributed web applications (Bash Scripting, C#, C++, Java, Python, Perl, PowerShell, etc.).
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate strategic information security topics, policies and standards as well as risk-related concepts to technical and nontechnical audiences at various hierarchical levels.
Identity Statement
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.
Devsecops Engineer Jobs by Experience Level
See All 355+ Devsecops Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Devsecops Engineer JobsDevsecops Engineer Job Market
Who's Hiring
- Leidos25
- CACI International11
- Lockheed Martin10
- SAIC7
- Booz Allen Hamilton7
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Consulting & Professional Services
- Airlines
- Education
What Employers Look For
The qualifications that appear most often in devsecops engineer jobs.
- Experience securing CI/CD pipelines using tools such as Jenkins, GitHub Actions, or GitLab CI
- Proficiency with infrastructure-as-code tools including Terraform, Ansible, or CloudFormation
- Hands-on knowledge of container security in Kubernetes or Docker environments
- Familiarity with cloud security controls across AWS, Azure, or Google Cloud Platform
- Experience with SAST, DAST, or SCA tooling integrated into development workflows
- Bachelor's degree in computer science, cybersecurity, or a related technical field
Tips for Your Devsecops Engineer Job Search
Tailor your resume to the stack
Hiring managers scan for specific tools before reading anything else. List the exact platforms you've worked with, such as Terraform, Kubernetes, Vault, or Falco, in a dedicated skills section so your resume clears automated filters quickly.
Certify before you apply to federal roles
Government and defense contractors almost always require a DoD 8570 or 8140 baseline certification like Security+ or CISSP. If you're targeting those postings, confirm your certification is active and list it prominently near the top of your resume.
Apply early to roles that fit
Migrate Mate lists devsecops engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Show pipeline ownership, not participation
Recruiters distinguish candidates who built and owned secure CI/CD pipelines from those who contributed to them. Describe the scope of what you owned, the threat model you addressed, and the measurable outcome, rather than listing tools you touched.
Prepare for a live threat-modeling exercise
Many devsecops engineer interviews include a whiteboard or collaborative threat-modeling session rather than a purely algorithmic coding round. Practice walking through an architecture diagram, naming attack surfaces, and proposing controls out loud before your first technical screen.
Negotiate on scope before salary
Devsecops roles vary widely in actual authority. Before discussing compensation, clarify whether the role has enforcement power over developers or is purely advisory. That distinction changes the job's day-to-day demands and your leverage in the offer conversation.
Devsecops Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most devsecops engineers?
The companies hiring the most devsecops engineers right now include Leidos, CACI International, and Lockheed Martin, with the largest share of openings in Virginia, Maryland, and District of Columbia, based on current listings on Migrate Mate as of November 2026. Demand is concentrated in technology, defense contracting, and financial services.
How many devsecops engineer jobs are remote?
About 70% of devsecops engineer openings are fully remote or hybrid as of November 2026, making it one of the more distributed roles in the security field. Cloud-focused and platform engineering sub-areas tend to offer the most remote flexibility, while roles involving classified systems or on-premises infrastructure typically require in-office presence.
How do you become a devsecops engineer?
Start with a foundation in either software development or systems administration, then layer in security fundamentals through a certification like Security+ or Certified Kubernetes Security Specialist. Build practical experience by hardening CI/CD pipelines in personal or open-source projects, then move into a security engineering or platform engineering role where you can take on devsecops responsibilities directly.
Can you get hired as a devsecops engineer without direct experience?
Yes, candidates with strong software engineering or cloud infrastructure backgrounds can transition into devsecops engineer roles by demonstrating security depth through certifications and hands-on projects. Contributing to open-source security tooling, publishing a pipeline-hardening write-up, or earning a cloud security specialty credential signals practical readiness to hiring managers who are evaluating non-traditional backgrounds.
What does the devsecops engineer interview process look like?
Most devsecops engineer interviews include an initial recruiter screen, a technical phone interview covering CI/CD and security tooling, and a practical round that often involves a threat-modeling exercise or a live pipeline review. Final rounds typically include a system design conversation focused on secure architecture and a behavioral interview with engineering leadership assessing cross-functional collaboration.
Where can I find and apply to devsecops engineer jobs?
You can find and apply to devsecops engineer jobs on Migrate Mate, which lists current openings from across the United States. Find roles that match your experience and specialization, then apply directly to each listing from the page.
See All 355+ Devsecops Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Devsecops Engineer Jobs