Senior DevSecOps Engineer

Senior DevSecOps Engineer

Location: Remote – Pennsylvania

Position Summary

We are seeking a Senior DevSecOps Engineer to strengthen cloud security, automate security processes, and integrate security best practices throughout the software development lifecycle. This hands-on role focuses on securing AWS infrastructure, implementing automated security controls, and ensuring cloud-native applications and CI/CD pipelines remain secure, scalable, and compliant.

The ideal candidate combines deep AWS security expertise with strong automation, infrastructure-as-code, and security engineering experience. This individual will collaborate with development, infrastructure, and engineering teams to proactively identify risks, streamline remediation, and support secure application delivery.

Key Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments and applications.
• Integrate automated security testing (SAST, DAST, SCA) into CI/CD pipelines to identify vulnerabilities early in development.
• Manage vulnerability assessments, prioritization, remediation, and continuous cloud security improvements.
• Develop automated security solutions using Terraform, AWS Config, Python, Go, or Bash.
• Implement security governance practices, including identity and access management, encryption, secrets management, and policy-as-code.
• Monitor security threats, automate incident response workflows, and conduct root-cause analysis.
• Secure containerized applications and infrastructure using Docker, Kubernetes, and AWS ECS/EKS.
• Collaborate with engineering teams to establish security standards for cloud-native and AI-enabled applications.
• Maintain security documentation and support compliance assessments and audits.

Required Qualifications

• 8+ years of experience in DevSecOps, cloud security, or security engineering.
• Advanced knowledge of AWS security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC, and CloudTrail.
• Hands-on experience integrating security scanning tools into CI/CD pipelines.
• Strong infrastructure-as-code experience with Terraform or AWS CDK.
• Proficiency in scripting and automation using Python, Go, or Bash.
• Experience securing containerized environments using Docker, Kubernetes, or ECS/EKS.
• Strong understanding of vulnerability management, threat modeling, incident response, and cloud security best practices.
• Ability to collaborate across technical teams and communicate security risks effectively.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.

Preferred Qualifications

• Experience securing AI/LLM applications, including access controls, prompt injection prevention, and model governance.
• Familiarity with CrowdStrike, Zscaler, or similar enterprise security platforms.
• Understanding of Model Context Protocol (MCP) and agentic AI security.
• Experience supporting SOC 2, ISO 27001, or similar compliance frameworks.
• AWS Security Specialty, CISSP, CCSP, or comparable certifications.
• Experience supporting enterprise-scale or multi-region cloud environments.

About Us:

At Brooksource, relationships are the foundation of everything we do. Since 2000, we've built lasting partnerships with clients, consultants, and internal teams to deliver an exceptional experience across every engagement. As a trusted IT and Engineering services provider, Brooksource supports Fortune 500 organizations through Experience-Driven Staffing, Professional Services, and Elevate, our proprietary Workforce Transformation program. Whether you're hiring for software development, cloud computing, cybersecurity, data analytics, or enterprise IT, our customized staffing solutions are designed to align with your company's unique goals, culture, and technology stack. We offer flexible hiring models, including contract, contract-to-hire, and direct placement to meet your evolving business needs.

We are a certified partner of leading platforms, including Salesforce, AWS, Microsoft, and Google Cloud, enabling us to deliver scalable, end-to-end technology solutions. With a growing national footprint, Brooksource is redefining expectations in IT consulting, engineering services, and technology workforce solutions.

EEO Statement:

Brooksource is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances.

Benefits & Perks

Benefits & Perks: Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee's needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

Pay Disclaimer:

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.