Role Description
WWT Digital is building a joint AI + Security practice and needs a Senior DevSecOps Engineer to anchor delivery of our CI/CD Security Baseline offering (DIG-APS-01). You will work alongside WWT's Global Security team and our AI-native delivery squads to embed automated security tooling into client SDLC environments β from initial assessment through hardened pipeline design and handoff. This is a client-facing, hands-on engineering role.
Responsibilities
-
Assess and instrument client CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps) with SAST, DAST, SCA, and secrets scanning tools
-
Implement SBOM generation workflows and license compliance gates
-
Configure and tune tooling (Snyk, Semgrep, Checkov, Trivy, SonarQube, OWASP ZAP, Veracode, or equivalents) to reduce false positive rates and drive developer adoption
-
Define security gates, policy-as-code frameworks, and break/fix thresholds appropriate to client risk tolerance
-
Translate findings into remediation roadmaps that engineering teams can act on without security expertise
-
Work with WWT Security architects on shared delivery engagements and co-present findings to client CISOs and engineering leadership
Qualifications
-
4β7 years hands-on with CI/CD platforms β specifically security integration, not just DevOps
-
Deep familiarity with SAST/DAST/SCA tooling and the tradeoffs between them in different pipeline contexts
-
IaC security scanning (Terraform, Bicep, CloudFormation via Checkov, tfsec, or equivalents)
-
Secrets management: HashiCorp Vault, AWS Secrets Manager, GitHub Advanced Security secret scanning
-
Container and image scanning: Trivy, Grype, Clair, or equivalents
-
Can write pipeline-as-code β not just configure existing pipelines
-
Experience translating security findings for developer audiences, not just security teams
-
Bonus: AI-generated code scanning, SBOM tooling (Syft, CycloneDX), software supply chain security (SLSA)
-
Bonus: prior consulting or professional services background β client management and scoping matter
Requirements
-
Want to learn more about Consulting & Security Services? Check us out on our platform:
WWT Consulting Services
-
Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $100,000 to $130,000 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.
Benefits
-
Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
-
Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
-
Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
-
Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program