Senior DevOps Engineer (DevSecOps / AI-Assisted Security)
Job Description
The OperAxis team is hiring a Senior DevOps Engineer for a remote U.S. contract. This is not a traditional DevOps role. You will bring deep DevSecOps and AI-assisted security expertise to a mature DevOps team, strengthening CI/CD pipelines across hybrid environments and partnering with application teams to embed security throughout the software lifecycle. Candidates must be U.S. citizens and able to work Eastern Time hours. What you'll do: - Perform advanced application security analysis using AI-assisted tools, SAST, SCA, dependency analysis and software supply chain security solutions - Partner with application teams to implement secure software delivery practices across the SDLC - Develop and automate security controls, policies, quality gates and remediation workflows in CI/CD pipelines - Use AI-powered tools and coding assistants to identify vulnerabilities, recommend fixes and accelerate remediation - Analyze and prioritize security findings with development teams to reduce risk - Evaluate and implement emerging AI-driven security capabilities Requirements: - 10+ years in DevOps, DevSecOps, application security, secure software engineering or a related field - Expert knowledge of application security, vulnerability management and software supply chain security (SAST, SCA, DAST, dependency analysis, secure coding) - Hands-on DevSecOps, including CI/CD security integration, container/image security and strong scripting or automation - Hands-on experience with AI technologies such as LLMs, MCP servers, AI agents and code assistants (Claude Code, GitHub Copilot, Codex or similar) for security analysis and remediation - Experience with security tools such as SonarQube, Sonatype Nexus IQ, GitHub Advanced Security, HCL AppScan, Prisma, Qualys or similar - Experience building secure CI/CD pipelines with GitHub, GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build or similar - U.S. citizenship Preferred: - Experience partnering with development teams to remediate vulnerabilities and improve security posture