DevSecOps Engineer
Auto Club Enterprises2 days ago
Costa Mesa, CA, USASenior
Base Salary
$110k - $146k/yr
Responsibilities
- Embed automated security controls and risk-based security gates into CI/CD pipelines across build, test, and release stages.
- Build and maintain reusable pipeline libraries, security plugins, automation frameworks, and internal DevSecOps platform extensions.
- Monitor production and cloud environments to detect, log, and respond to misconfigurations and intrusions.
- Drive security architecture and controls across AWS, Azure, Kubernetes, containers, and infrastructure-as-code environments.
- Evaluate, integrate, standardize, and consolidate application, pipeline, container, and cloud security tools.
- Translate regulatory requirements into automated controls and collect evidence for continuous compliance and audit readiness.
- Collaborate with developers on secure coding and advise IT on secure cloud configurations.
- Lead vulnerability management and remediation while participating in threat modeling and architecture reviews.
- Occasionally travel to off-site business meetings or conferences.
Requirements
- At least 5 years of experience in software engineering, DevOps, or DevSecOps roles, preferably in enterprise or regulated environments.
- Hands-on experience securing CI/CD pipelines and modern application stacks.
- Practical expertise with cloud platforms such as AWS, Azure, or Google Cloud and container technologies such as Docker, Kubernetes, or OpenShift.
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience in DevSecOps or security engineering roles.
- Experience building and maintaining internal tooling with Python or Bash, along with strong Linux and Git knowledge.
- Experience designing Jenkins CI/CD pipelines and using version control systems such as Git.
- Strong technical communication, collaboration, and influence skills, including the ability to drive security adoption without direct authority.
- Working knowledge of Agile and Scrum practices.
- Preferred experience building or extending internal developer platforms and security tooling, including Snyk, SonarQube, Nexus, or equivalent solutions.
- Preferred financial-services or regulated-industry experience, compliance and audit knowledge, and experience implementing security controls in highly regulated environments.
- Preferred certifications include CISSP, CISM, CCSP, AWS Certified Security Specialty, Azure Security Engineer, or equivalent credentials.
- Preferred knowledge of Python, Java, JavaScript, Bash, PowerShell, and Perl.
Benefits
- Medical, dental, and vision coverage.
- 401(k) savings plan with company match and pension.
- Tuition assistance.
- Floating holidays and PTO for community volunteer programs.
- Paid parental leave.
- Wellness programs.
- Employee discounts on membership, insurance, travel, entertainment, services, and more.
- Occasional travel to off-site meetings or conferences, listed as 5%.
Tech Stack
AWSAzureBashDockerGitGoogle CloudJavaJavaScriptJenkinsKubernetesLinuxOpenShiftPerlPowerShellPythonSonarQube
Categories
About Auto Club Enterprises
Auto Club Enterprises is a group of AAA motor clubs serving more than 17 million members across 21 U.S. states. It provides roadside assistance, auto/home/life insurance, travel services, and member discounts, funded by membership dues, insurance premiums, and service fees. Headquartered in Costa Mesa, California, it operates more than 300 branches and 23 call centers under brands such as the Automobile Club of Southern California, AAA Texas, and AAA New Mexico.