Lead DevSecOps Engineer
AEG Worldwide13 hours ago
Base Salary
$140k - $160k/yr
Responsibilities
- Lead the development, implementation, and continuous improvement of the enterprise Secure Software Development Lifecycle program and secure development standards.
- Architect and mature CI/CD security capabilities, including secure build processes, deployment workflows, container images, dependencies, automated testing, policy enforcement, and continuous compliance controls.
- Lead the architecture, implementation, governance, monitoring, and maintenance of application security tooling and security visibility capabilities.
- Perform threat modeling, application risk assessments, secure code reviews, vulnerability management, remediation tracking, and vulnerability disclosure activities.
- Provide security leadership and strategic guidance to Engineering, DevOps, Platform, Infrastructure, GRC, and Information Security teams.
- Lead security audits, evidence collection, control testing, compliance assessments, and application or development-environment incident response support.
Requirements
- BA/BS degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field is required; an advanced degree is preferred.
- At least five years of experience in DevSecOps, Application Security, Security Engineering, or related cybersecurity roles is required.
- Experience integrating security throughout the software development lifecycle, including CI/CD pipelines and modern software delivery platforms.
- Hands-on experience with SAST, DAST, SCA, container security solutions, application security testing, threat modeling, risk assessments, vulnerability management, and remediation tracking.
- Experience implementing monitoring, alerting, and security controls across cloud, application, and infrastructure environments.
- Knowledge of SSDLC practices, secure coding principles, OWASP Top 10, NIST SSDF, container technologies, and cloud-native application deployment models.
- Familiarity with Laravel and other enterprise web application frameworks.
- Programming experience with JavaScript, Python, Ruby, PHP, or C#.
- Experience with GitHub Actions, Jenkins, CircleCI, Azure DevOps, or similar CI/CD platforms.
- Relevant certifications such as CISSP, CSSLP, GWAPT, GCSA, AWS Security Specialty, Microsoft Azure Security Engineer Associate, CKS, or equivalent are preferred.
- Strong stakeholder management, communication, analytical, troubleshooting, collaboration, ownership, and prioritization skills, including the ability to work with globally distributed teams across multiple time zones.
Benefits
- Comprehensive medical, dental, and vision insurance.
- Paid holidays, vacation, and sick time.
- Company-paid basic life insurance and voluntary life insurance.
- Parental leave.
- 401(k) plan with a current employer match of 3%.
- Flexible spending accounts, health savings account options, and wellness offerings.
- The role is eligible for a bonus under the current bonus plan requirements.
- The pay scale shown applies to the LA Metro area, and actual pay may vary by geographic region.
Tech Stack
Categories
About AEG Worldwide
AEG Worldwide (Anschutz Entertainment Group) develops, owns, and operates live-entertainment venues, sports teams, music festivals, and entertainment districts for fans and brand partners. Its businesses span concert and sports promotion, venue management, ticketing, and corporate sponsorships, with revenue from events, rentals, and partnerships. Founded in 1994 and headquartered in Los Angeles, AEG hosts more than 160 million guests annually across 300+ venues worldwide.