DevSecOps Engineer

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job title: DevSecOps Engineer.
Location: Boston, MA.

Key Responsibilities:
Secure Development Lifecycle

• Integrate security practices throughout the development of prototypes and production systems.
• Perform security assessments, code reviews, and penetration testing to identify and remediate vulnerabilities early.
• Provide guidance on secure coding practices and collaborate with development teams to embed security from the start.

• Design and implement robust security controls for cloud environments.
• Develop secure authentication and authorization mechanisms using standards like OAuth and OIDC.
• Conduct threat modeling and proactively identify and mitigate potential security risks.

• Develop code to automate security configuration management and integrate security into CI/CD pipelines.
• Build, test, and deploy cybersecurity-relevant technical solutions, including proof-of-concept implementations.

• Ensure alignment with compliance frameworks and internal security standards.
• Document security architectures, control implementations, and supporting processes.

• Actively participate in agile ceremonies with geographically dispersed teams.
• Collaborate across teams to remove barriers and improve security posture across the program.
• Influence and mentor team members in secure development and DevSecOps practices.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• 5 years of experience in application security, cloud security, or related roles.

• Strong knowledge of secure coding and threat modeling.
• Experience securing cloud infrastructure (especially AWS) and implementing secure cloud architectures.
• Proficiency in scripting or programming languages such as Python, Java, Go, or Bash.
• Familiarity with CI/CD tools (e.g., GitHub Actions, GitLab Pipelines, AWS CodeDeploy).

• Experience with static/dynamic analysis tools, penetration testing, and security automation.
• Familiarity with DevSecOps principles and secure software delivery pipelines.

• Strong analytical, problem-solving, and communication skills.
• Ability to explain security concepts to technical and non-technical audiences.
• Security certifications preferred (e.g., CISSP, CSSLP, AWS Security).
• Interest in emerging threats, AI/ML security, and continuous learning.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.