Senior DevSecOps

About the role

Annual Compensation: $170,000 - $200,000

Position Type: Full-Time, Remote

About the Role

VIP is seeking a Senior DevSecOps Engineer to own the security of how we build and run software, secure our release pipeline, and strengthen our cloud environments.

Today, many of the foundational components are already in place. SonarQube and CAST are deployed, CrowdStrike Cloud Security Posture Management (CSPM) is operational, and a comprehensive cloud security framework has been established. The opportunity is to operationalize these investments, embed security into engineering workflows, and make secure development and cloud operations the default path across the organization.

This role works closely with engineering, infrastructure, cloud, and security teams while providing guidance and mentorship to a junior Cloud Security Engineer located in India. The position has strong executive sponsorship and clear organizational support, reflecting VIP's commitment to maturing its security program.

What You'll Do

• Build and enforce secure-by-default software development and release processes across engineering teams.
• Implement and optimize code security controls, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and secrets scanning within CI/CD pipelines.
• Operationalize VIP's cloud security framework across AWS environments and acquired business units.
• Manage and mature CrowdStrike Cloud Security Posture Management (CSPM) capabilities, including misconfiguration remediation and governance workflows.
• Centralize and strengthen cloud identity and access management through Okta integration and least-privilege access controls.
• Establish security standards for resource ownership, classification, and tagging across cloud environments.
• Implement and manage secrets management solutions with automated rotation and secure storage practices.
• Support data protection initiatives, including encryption validation and data loss prevention controls.
• Partner with infrastructure and operations teams to enhance resilience strategies, including immutable backup configurations and recovery planning.
• Create scalable security patterns, standards, and documentation that enable engineering teams to move quickly while maintaining security requirements.
• Mentor and support junior security team members while helping extend security programs across newly acquired business units.

What You'll Bring

• 5+ years of experience across DevOps, DevSecOps, platform engineering, cloud security, or security engineering roles.
• Hands-on ownership of CI/CD platforms such as Jenkins, Bitbucket, Git-based pipelines, GitHub Actions, GitLab CI/CD, or similar technologies.
• Experience implementing and supporting SAST, DAST, SCA, secrets management, and secure software delivery practices.
• Strong AWS security expertise, including IAM, Organizations, networking, KMS, logging, monitoring, and cloud security posture management.
• Experience with Infrastructure as Code technologies such as Terraform or CloudFormation.
• Proficiency with scripting and automation using Python or similar languages.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration skills, including experience working with distributed teams across multiple time zones.
• Ability to influence engineering and infrastructure teams while balancing security, usability, and business needs.

Nice to Have

• Experience supporting Azure environments.
• Experience implementing Okta federation and identity solutions within AWS.
• Experience with Rubrik or similar enterprise backup and recovery platforms.
• Experience securing containerized workloads and modern cloud-native environments.
• AWS Security Specialty, CCSP, GIAC Cloud Security, Kubernetes Security Specialist (CKS), or similar security certifications.

Benefits Include

• Health Insurance
• Vision and Dental Expense Reimbursement
• 401(k) Match & Employer Contributions
• Life and Disability Insurance
• Health Savings and Flexible Spending Accounts
• Paid Parental Leave
• Discounted Gym Memberships
• Combined Time Off and Floating Holidays
• Flex and Remote Work Schedules
• On-site Child Care Center (VT)
• On-site Fitness Center (VT)
• On-site Health Clinic (VT)

Legal & Compliance