Product Security Engineer - SecDevOps

Responsibilities

• Serve as a security advisor to engineering teams, guiding the incorporation of secure coding practices and automated scanning into CI/CD pipelines.
• Leverage SAST and SCA tools to perform assessments, tune false positives, and provide actionable remediation guidance.
• Develop and maintain reference architectures, best practices, and enablement materials for application security tooling.
• Partner with engineering teams to improve SDL control adoption, including threat awareness, dependency hygiene, and vulnerability remediation.
• Build dashboards and metrics to communicate SecDevOps maturity, scanning coverage, and vulnerability trends to stakeholders.

Requirements

• Strong understanding of DevSecOps/SecDevOps principles, secure SDLC, and modern software development practices.
• Hands-on expertise with SAST and SCA tools (e.g., Coverity, Black Duck, or similar), including configuration tuning and triage.
• Proficiency in at least one development language such as Python, Java, Go, or .NET.
• Familiarity with CI/CD ecosystems like GitLab, GitHub Actions, Jenkins, or Azure DevOps.
• Experience with container security fundamentals, cloud-native development, and Linux-based environments.

Preferred Qualifications

• Relevant security or DevOps-oriented certifications such as CISSP, CSSLP, GSEC, GCSA, or Security+.
• Cloud or DevOps certifications including AWS, Azure, or Kubernetes.

Benefits

• Comprehensive healthcare programs.
• Award-winning financial wellness tools and resources.
• Generous leave of absence for new parents and caregivers.
• Industry-leading wellness platform.

About the Company

Dell Technologies is a unique family of businesses that helps individuals and organizations transform how they work, live, and play. Our Product Security Engineering Team ensures that all code developed at Dell is secure by default, building security into every phase of the software development lifecycle.