RemoteLeaf Logo
Log in Sign up

Sr. Security Engineer

4 hours, 44 minutes ago
United States
Full-time
Senior
Security Engineer
Cybersecurity
Argo CD AWS Bash CI/CD Cybersecurity DevSecOps Docker GitHub Kubernetes LLM Penetration Testing Python
Apply Now
Istari

Istari

Istari Digital is at the forefront of revolutionizing industries with digital twins, simplifying and securing models and simulations for enhanced products and systems. Their innovative approach empowers various sectors from aerospace to agriculture, pa...

Aerospace & Defense
11-50
Founded 2022
$13M raised
View All Jobs

Description

  • Own and evolve CI/CD security tooling for SAST, SCA, secrets detection, container scanning, and artifact signing.
  • Assess security-tooling effectiveness and coverage; identify gaps and lead tool improvements, consolidation, or replacement.
  • Translate NIST SP 800-53, NIST SP 800-171, and RMF requirements into automated pipeline controls, gates, thresholds, and policies.
  • Maintain risk-based pass/fail criteria and manage documented, traceable exceptions and manual reviews.
  • Produce assessor-ready security evidence for authorizations, continuous monitoring, and audits.
  • Enforce software supply-chain integrity through artifact and commit signing, signature verification, branch protection, and repository rulesets.
  • Automate SBOM and VEX data creation and maintenance for delivered software.
  • Develop automated and manual penetration-testing capabilities and feed findings back into engineering workflows.
  • Help mature security operations, incident response, and incident-management capabilities using AI-first automation.
  • Partner with engineering, product, and cybersecurity leadership to shift security checks left and define the security-tooling roadmap.

Requirements

  • 7+ years of experience in DevSecOps, application security, security operations and incident response, or general security engineering, including 3+ years owning CI/CD security tooling.
  • Hands-on experience configuring and enforcing SAST, SCA, secrets detection, and container-scanning tools in production pipelines.
  • Experience implementing risk-based gates, vulnerability thresholds, and exception processes.
  • Experience mapping pipeline controls to NIST SP 800-53, NIST SP 800-171, or RMF requirements and producing assessment or authorization evidence.
  • Experience evaluating and evolving security tooling and influencing engineering teams without direct authority.
  • Scripting or automation experience with Python, Bash, or similar languages.
  • Security+ or equivalent DoD 8140 qualifying certification, or ability to obtain it within 2 months of hire.
  • U.S. citizenship and residence/work authorization in the United States.
  • Familiarity with GitHub, Argo CD, JFrog, Snyk, Docker, Kubernetes, or AWS (preferred).
  • Experience with Government DevSecOps, ATO efforts, supply-chain integrity, policy as code, AI/LLM security tools, penetration testing, or advanced security certifications/active clearance (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

ShyftLabs

Forward - Security Engineer, Network & Infrastructure Security

ShyftLabs 51-200 IT Services

ShyftLabs is seeking a client-facing Security Engineer, Network & Infrastructure Security to strengthen enterprise network, infrastructure, and cloud security controls for a Fortune 500 client.

Canada Full-time Senior Security Engineer
$71k-$85k
Ansible AWS Azure Bash CI/CD Cisco Cloudflare CrowdStrike DHCP DNS Fortinet GCP Network Security PowerShell Python TCP/IP Terraform
4 hours, 44 minutes ago
Zen Educate

IT Operations & Security Lead - UK (Remote)

Zen Educate 201-500 Diversified Consumer Services

Zen Educate is seeking a remote IT Operations & Security Lead to build and scale secure, automated corporate IT systems and security practices for its growing UK and US workforce.

United Kingdom Full-time Lead Security Engineer Systems Administrator
$94k-$121k
Cybersecurity Encryption
4 hours, 59 minutes ago
Binance

Binance Accelerator Program – AI Infra Security Engineer

Binance 5001+ Capital Markets

Join Binance’s Infrastructure team as an AI Security Accelerator intern to strengthen the security of its multi-cloud production environment through AI-driven detection, penetration testing, and LLM-agent security.

Australia Singapore Taiwan Hong Kong Internship Entry Level Security Engineer
AWS Azure CI/CD Deep Learning GCP Linux LLM Machine Learning Network Security Penetration Testing Secrets Management WAF
1 day, 1 hour ago
CI&T

[Job - 31833] Data Manager (Data Governance), Brazil

CI&T 5001+ Internet Software & Services

CI&T is seeking a Security & Privacy Governance Lead to implement sensitive-data governance for a major US mortgage lender’s finance data platform modernization, ensuring approved classification, masking, access, and lineage controls before development begins.

Brazil Full-time Lead Security Engineer
Snowflake
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers