Staff DevSecOps Engineer

Responsibilities

• Design, implement, and operate the shift-left security toolchain across CI/CD pipelines (SAST, DAST, SCA, secrets, container, and IaC scanning)
• Design and deploy production cloud security architecture with a focus on GCP
• Build, codify, and maintain secure-by-default infrastructure modules in Terraform
• Operate and fine-tune SIEM and security telemetry pipelines
• Lead technical security incident response, including runbooks and on-call design
• Manage the end-to-end vulnerability management lifecycle
• Partner with Engineering and Compliance to translate framework requirements (SOC 2, HIPAA, ISO 27001, FedRAMP) into controls
• Mentor junior security and engineering team members

Requirements

• 10+ years of experience in security engineering, DevSecOps, or cloud security
• Deep experience securing modern CI/CD pipelines
• Strong expertise in Google Cloud Platform (GCP)
• Expert-level Terraform skills
• Experience standing up and operating a SIEM end-to-end
• Hands-on incident response leadership experience
• Practical experience with SOC 2, HIPAA, and ISO 27001
• Strong programming or scripting skills in Python or Go
• US Citizen and eligible for US security clearance

Preferred Qualifications

• Experience with FedRAMP, DoD RMF, or HITRUST
• Active US security clearance (Secret, TS, or TS/SCI)
• Deep Kubernetes and container security expertise
• Experience securing AI/ML workloads
• Industry certifications (Google Professional Cloud Security Engineer, AWS Security Specialty, OSCP, etc.)

About the Company

Trase Systems is an AI platform that empowers enterprise leaders to harness the full potential of AI without the associated complexity and risks. We specialize in bridging the “last mile” of AI adoption for mission-critical applications in Healthcare, Oil & Gas, and National Security.