Note: The job is a remote job and is open to candidates in USA. Mastercam is a manufacturing software company focused on digital transformation and innovative solutions for manufacturers. The DevSecOps Security Engineer will secure and govern cloud-native application platforms, AI-enabled solutions, and supporting infrastructure by integrating security into the software development lifecycle. The role will implement and maintain controls across Kubernetes, CI/CD pipelines, identity and access management, secrets, APIs, monitoring, and AI workloads.
Responsibilities
- Secure Kubernetes-based platforms and containerized workloads
- Implement and maintain Kubernetes security controls including RBAC, Network Policies, Pod Security Standards, and namespace segmentation
- Perform security reviews of platform architecture and application deployments
- Develop infrastructure hardening standards and security baselines
- Integrate security controls into CI/CD pipelines
- Implement automated vulnerability scanning, code analysis, and compliance checks
- Establish secure software supply chain processes
- Partner with development teams to remediate vulnerabilities and improve secure coding practices
- Develop and maintain security guardrails within GitOps workflows
- Secure authentication and authorization systems
- Implement least-privilege access controls across applications and infrastructure
- Support identity federation, Single Sign-On (SSO), OAuth2, OpenID Connect, and Multi-Factor Authentication (MFA)
- Review systems for access governance and privileged access risks
- Implement secure management of secrets, certificates, encryption keys, and service credentials
- Support automated secret rotation and certificate lifecycle management
- Ensure secure application integration with centralized secrets management platforms
- Secure API gateways and service-to-service communications
- Review API implementations against OWASP API Security standards
- Implement authentication, authorization, rate limiting, and API threat protection controls
- Support Zero Trust networking initiatives
- Create dashboards and alerts for security events
- Develop security metrics and monitoring capabilities
- Collaborate with operations teams during security investigations and incident response activities
- Analyze platform telemetry and audit logs to identify threats and control gaps
- Support security reviews for AI and machine learning workloads
- Assist with implementing controls to protect against prompt injection, sensitive data exposure, and model misuse
- Participate in AI governance and risk assessment activities
- Evaluate emerging risks associated with Large Language Models (LLMs), vector databases, and AI platforms
Skills
- This position requires expertise in cloud-native technologies, Kubernetes, container security, CI/CD environments, and modern application security practices, along with the ability to contribute to emerging AI and platform security initiatives
- Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered
- 4 - 5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering
- 1+ year of hands-on experience supporting Kubernetes or containerized application environments
- Experience securing cloud-native applications and services
- Experience implementing vulnerability management and application security programs
- Experience working with software development teams and CI/CD pipelines
- Experience supporting cloud environments such as AWS, Azure, or Google Cloud
- Knowledge of:
- Kubernetes architecture
- Pods, Deployments, Services, and Ingresses
- RBAC
- Network Policies
- Container security
- Workload isolation
- Cluster security fundamentals
- Experience with:
- Docker
- Container image security
- Image scanning
- Vulnerability remediation
- Secure image lifecycle management
- CI/CD pipelines
- Source code management platforms
- Git workflows
- Automation and scripting
- Understanding of:
- SAST
- DAST
- Dependency scanning
- Secret scanning
- Infrastructure-as-Code security
- OAuth2
- OpenID Connect
- SAML
- MFA
- Role-Based Access Control
- Vulnerability management
- Threat detection
- Security monitoring
- Incident response support
- Risk assessments
- Ability to automate security processes using:
- Python
- Bash
- PowerShell
- Experience with any of the following technologies is highly desirable:
- Kubernetes
- Istio
- FluxCD
- APISIX
- OpenTelemetry
- Grafana
- Keycloak
- OpenBao
- HashiCorp Vault
- Azure Entra ID
- AWS IAM
- PostgreSQL
- RabbitMQ
- Qdrant
- Amazon Bedrock
- Generative AI applications
- Retrieval Augmented Generation (RAG)
- Vector databases
- LLM Security
- Knowledge of:
- OWASP Top 10
- OWASP API Security Top 10
- OWASP Top 10 for LLM Applications
- NIST Cybersecurity Framework
- CIS Benchmarks
- Zero Trust Architecture
- Secure Software Development Lifecycle (SSDLC)
- One or more of:
- Security+
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- AWS Certified Security Specialty
- CISSP
- CCSP
- GIAC Certifications
Company Overview
Company H1B Sponsorship