Apply Now

DevSecOps Engineer

Hybrid in New York, NY, US • Posted 3 days ago • Updated 3 hours ago

Contract Independent

12 Months

No Travel Required

Hybrid

Depends on Experience

Anagha Techno Soft

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

Snyk
Xray
CodeQL / Dependabot
Trivy
Semgrep

Summary

Core Technical Skills

Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue
Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases
Scanning Tools: Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date)
AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes; prompt engineering for code-editing agents
CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron
Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends

Supporting Skills

Security fundamentals (injection, auth flaws, supply-chain/SBOM risk)
Risk-based prioritization beyond raw CVSS scores
Semantic versioning awareness for safe auto-upgrades
Testing discipline — regression validation before auto-merge

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91163035
Position Id: VADEATSTT1
Posted 3 days ago

Company Info

About Anagha Techno Soft

Anagha Techno soft is a reputable company specializing in IT services and staff augmentation. With a commitment to delivering cutting-edge solutions and top-notch services, Anagha Techno soft caters to a diverse clientele ranging from small businesses to large enterprises.

Go to company profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Hybrid in New York, New York

•

Today

Position: Sr Cloud Infrastructure Engineer with AI-Driven / SRE with DevSecopsLocation: NYC, NY (3 days onsite is must ) Duration: 12 Months Role: Automation Engineer AI-Driven Code Security & Remediation Framework Role Summary Builds and operates a system that scans GitHub/Artifactory repos for vulnerabilities and EOL libraries, then uses AI-driven automation to remediate findings cutting manual triage and patch time firm-wide. Core Technical Skills Programming: Strong Python (scanners, orchest

Easy Apply

Third Party, Contract