DevSecOps Engineer

About Us:

Founded in 1997, PruTech is dedicated to problem-solving, creating solutions, and maintaining strong partnerships with its clients. PruTech serves a diverse list of clients in different industries from government to finance, retail, and manufacturing. PruTech has offices in New York City, Washington DC, North Carolina, and two nearshore offices in Mexico City and India.

With over 20 years of Information Technology and system integration experience, PruTech provides multiple ways to assist organizations with future technology requirements including:

• Project based system integration
• Custom software solutions
• Package implementations
• Consulting and advisory services
• Big data and analytics
• Nearshore and offshore services

DevSecOps Engineer

Location: NYC

Full Time

We are seeking a DevSecOps Engineer to integrate security practices into the software development lifecycle across cloud and on-premises environments. This role will focus on embedding security into CI/CD pipelines, strengthening application and infrastructure security, and enabling secure, scalable deployments across hybrid environments.

Key Responsibilities

• Integrate security controls into CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions)
• Implement and manage application security tools (SAST, DAST, SCA)
• Secure cloud (AWS, Azure, Google Cloud Platform) and on-premises infrastructure, including hybrid environments
• Work closely with DevOps and engineering teams to ensure secure coding and deployment practices
• Manage and secure containerized environments (Docker, Kubernetes)
• Implement Infrastructure as Code (IaC) security (Terraform, CloudFormation)
• Conduct vulnerability assessments, threat modeling, and risk analysis
• Monitor and respond to security findings across applications and infrastructure
• Support incident response and remediation efforts
• Ensure alignment with security frameworks (e.g., NIST, CIS benchmarks)
  

Required Qualifications

• 5+ years of experience in DevSecOps, DevOps, or Application Security
• Strong experience with CI/CD tools (Jenkins, GitLab, GitHub Actions)
• Hands-on experience with cloud platforms (AWS, Azure, or Google Cloud Platform) and on-prem systems
• Experience with application security tools (SAST, DAST, SCA)
• Knowledge of container security (Docker, Kubernetes)
• Experience with Infrastructure as Code (Terraform, CloudFormation)
• Understanding of secure SDLC and DevOps practices
• Familiarity with security frameworks (NIST, CIS, OWASP)
  

Preferred Qualifications

• Experience in hybrid (cloud + on-prem) environments
• Knowledge of monitoring/logging tools (Splunk, ELK, etc.)
• Experience with identity and access management (IAM)
• Relevant certifications (e.g., Security+, CISSP, AWS Security Specialty)