Senior Staff DevSecOps Engineer

1 month ago

Somerville, MA, USAStaff+

Base Salary

$170k - $213k/yr

Responsibilities

Define and lead secure-SDLC practices, secure design reviews, dependency and secrets scanning, and secure coding standards.
Own application-layer security strategy, including SAST/DAST, software composition analysis, supply-chain vulnerability management, and secrets detection.
Set architecture and guardrails for AI and agentic tooling, including MCP servers, credential scoping, least-privilege access, and defenses against prompt injection and data exfiltration.
Harden CI/CD pipelines with least-privilege service accounts, secrets management, artifact verification, and gated deployments.
Build and configure integrations, automations, and tooling alongside the DevOps team.
Implement audit logging, anomaly alerting, and incident-relevant telemetry.
Maintain risk-based inventories of integrations, automations, custom tools, data flows, and access scopes.
Act as the technical security liaison to Information Security & GRC and lead security incident response and runbook ownership.

At least 9 years of experience in application security, DevSecOps, or security engineering, including enterprise integrations, automations, or data pipelines.
Experience establishing secure-development standards and mentoring engineers.
Strong scripting and programming skills using technologies such as Python, JavaScript, TypeScript, or PowerShell, with hands-on REST API and JSON experience.
Deep experience with SAST/DAST, dependency and software composition analysis, and secrets management.
Strong knowledge of least-privilege IAM, SSO using SAML or OIDC, and secrets and credential management.
Experience securing CI/CD pipelines end to end and using Git and modern deployment practices.
Preferred experience securing AI/LLM tooling or agentic systems, including MCP servers.
Preferred experience with Workato, Boomi, MuleSoft, Zapier, or custom-built integrations.
Preferred familiarity with SOX or audit-controlled compliance environments and controls such as segregation of duties, change management, and access review.
Preferred experience with Microsoft Azure, Google Cloud, AWS, infrastructure-as-code, or configuration-management tooling.
Experience in manufacturing, hardware, laboratory, or high-growth technology environments is preferred.

Relocation assistance is available.
Full-time employees receive 100% coverage of medical, dental, and vision premiums, with 80% coverage for dependents, starting day one.
At least 12 weeks of paid leave is provided for new parents and up to 20 weeks for birthing parents.
Generous vacation policies are offered.
The role is onsite, as indicated by the #LI-Onsite designation.
Competitive salaries and stock options are offered.