Dforeferrals

Senior DevSecOps Engineer

New York, NY · Senior

No sponsorship$170k-$230kDetected 20 days ago
JavaScriptPythonJavaBashPowerShellReact.NETGitAWSAzureCloud PlatformsKubernetesTerraformCI/CDLinuxDevOpsLLMsCybersecurityMicrosoft DefenderDetection EngineeringAuditingSystems EngineeringTest AutomationCommunication

About the role

  • The core of the DFO's culture is built around meaningful work and meaningful relationships and the family's commitment to giving back.
  • The office is headquartered in Westport, CT with regional offices in New York City, Singapore, and Abu Dhabi.
  • This is a hybrid position reporting primarily out of our New York City office location.

Responsibilities

  • Embed security-by-design across the SDLC with automated controls and measurable security outcomes.
  • Build and maintain secure CI/CD pipelines with SAST/SCA, IaC + container scanning, secret detection, and policy gates, including threat modelling and secure design practices.
  • Secure AWS/Azure workloads across identity, network, compute, and storage; implement encryption, classification, retention, DLP, and safe logging.
  • Reporting to the Cybersecurity Lead, the Senior DevSecOps Engineer will design, deploy, and secure scalable AWS + Azure environments with a strong focus on Infrastructure as Code (IaC).

Requirements

  • Bachelor's Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or related discipline.
  • 10+ years of experience in DevSecOps / Cloud Engineering delivering and securing production AWS and Azure environments, including cloud security architecture and operations.
  • At least 3 years hands-on experience operating enterprise-scale platforms (systems engineering/administration), including reliability engineering, monitoring/telemetry, and incident response.
  • Strong Kubernetes security experience with AKS/EKS, including policy enforcement and runtime protections.
  • Expertise in cryptographic key management and data protection, including AWS KMS / Azure Key Vault, encryption, and data security controls.
  • Experience securing AI/LLM systems and inference platforms (AI Foundry, AWS Bedrock, vLLM), including knowledge of OWASP LLM Top 10 and LLM guardrails.
  • Advanced IaC expertise with Terraform (plus CloudFormation/Bicep preferred), building standardized, governed cloud foundations (landing zones, guardrails, automation).
  • Proven experience building and securing CI/CD automation using GitLab and/or Azure DevOps, including automated security testing and supply-chain controls (SBOMs, artifact signing, provenance).
  • Strong proficiency across Linux and Microsoft ecosystems (identity, hardening, patching, operational best practices) and scripting with Python/Bash/PowerShell (application languages such as Java/.NET/JavaScript (React.js) are a plus).

Skills

  • The ideal candidate will possess the following knowledge, skills, attributes, and values:
  • Excellent communication and synthesis skills.

Compensation

  • Compensation for the role includes a competitive salary in the range from $170,000 -$230,000 (inclusive of a merit-based bonus, dependent on years of experience, level of education obtained, as well as applicable skillset) and an excellent benefits package, including a comprehensive employer paid medical plan and generous employer match for 401k.
  • Please note we are unable to provide immigration sponsorship for this position.
  • At the DFO, we believe our biggest asset is our people.

Benefits

  • 100% company paid medical premiums
  • Generous PTO offering
  • Gym reimbursement, back up childcare services, insurance, financial, and legal services, and much more!

Company info

  • 17 company paid holidays

Equal opportunity

  • We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture.

Visa & Work Authorization

  • Please note we are unable to provide immigration sponsorship for this position.

This listing is sourced directly from Dforeferrals's careers page and normalized into a canonical job model.