Staff DevSecOps Engineer

• Cloud Engineering builds and operates the infrastructure and environments that support Shield AI’s software products and platforms
• As a DevSecOps Engineer, you will design, build, and automate security controls across cloud infrastructure, software delivery systems, and containerized workloads
• You will partner with Cybersecurity, Infosec, Build Engineering, and product teams to turn security and compliance requirements into practical engineering controls
• This is a hands-on engineering role focused on making secure configurations repeatable and maintainable
• You will work across infrastructure, containers, CI/CD systems, and platform services to reduce security risk without creating unnecessary friction for engineering teams
• Design and implement security controls across AWS infrastructure and platform services
• Build and maintain hardened container images and secure base images for engineering and production workloads
• Integrate vulnerability, dependency, container, and configuration scanning into software delivery systems
• Automate security and compliance checks to reduce manual review and improve consistency
• Implement secrets management, identity, and access controls across infrastructure and engineering systems
• Build mechanisms for audit evidence, configuration validation, and compliance reporting
• Identify security weaknesses in infrastructure, containers, and delivery systems and drive remediation with owning teams
• Partner with Cybersecurity and Infosec to translate security requirements into scalable engineering controls
• Work with Build Engineering and Cloud Engineering to integrate security controls without compromising reliability or developer workflows
• At the Staff level, Define reusable patterns and drive adoption of security engineering practices across multiple teams

Benefits

• Excellent Medical Coverage
• Mental Health Employee Assistance Program
• Paid Parental Leave
• Pet Insurance
• Flexible Work Hours
• Onsite Gym (DC)
• Gym Discount (San Diego)
• Free Parking
• Competitive Compensation
• Stock Benefits
• 401K Services and Match- Experience with infrastructure-as-code and automated infrastructure provisioning
• 5+ years of related experience for Senior Engineer or 7+ years for Staff Engineer, or equivalent education and experience
• Experience implementing security controls in AWS or another major cloud environment
• Experience with vulnerability management, dependency scanning, container scanning, or configuration validation
• Ability to diagnose security and configuration issues across infrastructure, containers, and platform services
• Experience working with security and engineering teams to implement shared technical controls
• Experience automating security or infrastructure tasks using Python, Go, Bash, or a similar language
• Experience implementing identity, secrets, and access controls in cloud or engineering environments
• Experience securing containerized workloads and building or maintaining hardened container images
• Experience integrating security tooling into CI/CD or software delivery systems
• Experience operating systems in regulated or compliance-driven environments
• Experience with Kubernetes security, workload identity, or container runtime controls
• Experience building reusable hardened images or secure infrastructure baselines used across multiple teams
• Experience with cloud security posture management, policy-as-code, or automated compliance tooling
• Experience supporting audit evidence collection or continuous compliance workflows
• Familiarity with software supply-chain security, artifact integrity, or signing/attestation workflows