Responsibilities
- Lead and mentor security or DevOps engineering teams and drive security initiatives across organizational boundaries.
- Architect and integrate SAST and DAST tools into Jenkins, GitLab CI, Azure DevOps, or GitHub Actions at enterprise scale.
- Design and implement container, Kubernetes, API, cloud-native, secrets-management, and infrastructure-as-code security controls.
- Develop secure automation, observability, vulnerability-management, threat-modeling, and secure-architecture practices.
- Drive security strategy and communicate risk and complex security concepts to technical, non-technical, and executive stakeholders.
Requirements
- 4–5 years of experience in DevSecOps, Application Security, Security Engineering, or related roles, including at least 2+ years in a lead or senior technical role.
- Proven experience leading and mentoring security or DevOps engineering teams.
- Expert hands-on experience with Checkmarx One or an equivalent enterprise SAST platform, plus deep DAST experience.
- Experience with Jenkins, GitLab CI, Azure DevOps, GitHub Actions, container and Kubernetes security, API security, and secrets-management solutions.
- Deep experience with AWS, Azure, or GCP and advanced infrastructure as code using Terraform, CloudFormation, Pulumi, or Ansible.
- Strong experience with Docker, Kubernetes, Helm, service mesh technologies, Prometheus, Grafana, ELK, or Splunk.
- Proficiency in Python, Bash, Go, or PowerShell and understanding of Secure SDLC, OWASP Top 10, SANS Top 25, and vulnerability management.
- Experience with threat modeling, secure architecture reviews, Agile/Scrum or SAFe environments, and influencing stakeholders.
- Preferred qualifications include a bachelor's or master's degree, security/cloud/DevOps certifications, container and API security platforms, SIEM/SOAR, zero trust, penetration testing, and executive security strategy experience.
Benefits
- Competitive, family-friendly total rewards package.
- Inclusive work environment and benefits designed to meet diverse employee needs.
Tech Stack
Categories
About KLA
KLA develops industry-leading equipment and services that enable innovation throughout the electronics industry. We provide advanced process control and process-enabling solutions for manufacturing wafers and reticles, integrated circuits, packaging and printed circuit boards. In close collaboration with leading customers across the globe, our expert teams of physicists, engineers, data scientists and problem-solvers design solutions that move the world forward. Visit us at: www.kla.com Statements made on LinkedIn may constitute forward-looking statements under federal securities laws. These forward-looking statements involve risks and uncertainties that could significantly affect the expected results and are based on certain key assumptions. Due to such uncertainties and risks, no assurances can be given that such expectations will prove to have been correct, and readers are cautioned not to place undue reliance on such forward-looking statements, which speak only as of the date indicated. Other risks that KLA faces include those detailed in KLA filings with the Securities and Exchange Commission, including KLA's annual report on Form 10-K and quarterly reports on Form 10-Q. Forward-looking statements made by third parties do not necessarily reflect the opinion of KLA, are outside of KLA’s control and have not been verified or otherwise vetted by KLA.