DevSecOps Engineer - Information Security
Elevance Health2 days ago
Cincinnati, OH, USA +8 moreSenior
Responsibilities
- Define and implement secure SDLC practices, including automated testing, threat modeling, and secure coding standards.
- Lead vulnerability management strategy, risk-based prioritization, risk assessments, and reduction of vulnerability backlog and MTTR.
- Design and implement DevSecOps solutions across CI/CD pipelines using GitHub, GitLab, and Jenkins.
- Integrate and tune SAST, DAST, SCA, API security, and container-scanning tools for scalable pipeline adoption.
- Own and optimize CNAPP platforms such as Wiz and Prisma Cloud for cloud security posture and workload protection.
- Lead security architecture, requirements, software design, network architecture support, incident response planning, and complex technical escalations.
- Establish security controls and guardrails for AI-generated code and AI/LLM-enabled applications, including mitigation of prompt injection, model misuse, and data exposure.
- Define KPIs and reporting for security posture, pipeline coverage, and risk reduction, and obtain management approval for major security-system changes.
Requirements
- Bachelor’s degree in information technology or a related field, or an equivalent combination of education and experience.
- Minimum of eight years of experience in systems administration and security aspects of information systems, access management, network security technologies, networking, telecommunications, systems development and management, hardware, software, data, and people.
- Experience with vulnerability management, risk prioritization, Application Security, Cloud Security, containers, Kubernetes security, and DevSecOps.
- Hands-on experience integrating security into CI/CD pipelines at scale, including Harness pipelines.
- Experience with CNAPP platforms such as Wiz or Prisma Cloud and tools such as Snyk, Checkmarx, Veracode, SonarQube, JFrog Artifactory, Xray, and Curation.
- Experience securing AI/LLM-enabled applications or AI-assisted development workflows and familiarity with OWASP Top 10 for LLMs, prompt injection, and data leakage risks.
- Security certifications such as CISSP, CCSP, or CSSLP are preferred.
- Strong understanding of DevOps and Agile practices is preferred.
Benefits
- Hybrid work arrangement requiring associates to work in the office one to two days per week, with commuting-distance requirements unless an accommodation is granted.
- Benefits include merit increases, paid holidays, paid time off, incentive bonus programs, medical, dental, vision, disability, 401(k) matching, stock purchase plan, life insurance, wellness programs, and financial education resources.
- The position is a first-shift, non-management exempt role.
- The position is not eligible for current or future visa sponsorship.
Tech Stack
Categories
About Elevance Health
Fueled by our bold purpose to improve the health of humanity, we are transforming from a traditional health benefits organization into a lifetime trusted health partner. Our nearly 100,000 associates serve more than 118 million people, at every stage of health. We address a full range of needs with an integrated whole health approach, powered by industry-leading capabilities and a digital platform for health. We believe that improving health for everyone is possible. It begins by redefining health, reimagining the health system, and strengthening our communities.