{"schemaVersion":"jobsearcher.job.v1","id":"bd3be44ee89682ac93a8a40d","url":"https://jobsearcher.com/jobs/bd3be44ee89682ac93a8a40d","canonicalUrl":"https://jobsearcher.com/jobs/bd3be44ee89682ac93a8a40d","title":"Senior DevSecOps Engineer","description":"Senior DevSecOps EngineerWe are seeking a highly skilled and security-focused Senior DevSecOps Engineer to join the Akrites OSS Security Engineering team. This role is responsible for securing the open-source software ecosystem by analyzing, validating, and remediating vulnerabilities identified across critical OSS components and services.The engineer will work at the intersection of software engineering, security engineering, and cloud operations to strengthen software supply chain security and improve the security posture of open-source technologies.The ideal candidate possesses strong expertise in Java, Python, DevSecOps practices, vulnerability management, automation engineering, and cloud-native platforms, with a passion for driving secure development and operational excellence.This position will collaborate closely with client security engineering teams, open-source maintainers, and cross-functional product engineering groups to deliver scalable security solutions and sustainable remediation strategies.Key responsibilities include:OSS Vulnerability Analysis and RemediationAnalyze, triage, validate, and prioritize Open Source Software (OSS) vulnerabilities identified through security scanning platforms, Software Composition Analysis (SCA) tools, and vulnerability intelligence feeds.Perform technical investigations to determine exploitability, business impact, attack vectors, and remediation requirements.Develop and implement vulnerability fixes across OSS components using Java and Python, ensuring secure coding practices and compliance with security standards.Conduct root cause analysis for recurring vulnerabilities and recommend long-term mitigation strategies.Validate remediation effectiveness through code reviews, testing, proof-of-concept verification, and security assessment techniques.Secure Software Supply Chain EngineeringStrengthen software supply chain security through dependency management, secure package validation, and vulnerability governance practices.Partner with engineering teams to evaluate and remediate risks associated with third-party libraries, frameworks, and open-source dependencies.Support coordinated vulnerability disclosure and remediation workflows while maintaining confidentiality and security compliance.Contribute to vulnerability response activities from intake and validation through patch development, testing, and coordinated release processes.DevSecOps Platform EngineeringDesign, implement, and optimize DevSecOps workflows within the Akrites platform deployed on Google Cloud Platform (GCP). Integrate security controls into CI/CD pipelines, enabling automated vulnerability detection, policy enforcement, and remediation tracking.Enhance platform reliability, observability, and security through automation, infrastructure monitoring, logging, and operational analytics.Collaborate with development teams to embed security practices throughout the Software Development Lifecycle (SDLC).Essential Skills: Digital: Terraform; CodeQL; GitHub Advanced Security; Digital: Cloud Security; Security EngineeringCompany benefits and culture:• Inclusive and diverse work environment• Opportunities for professional growth and development• Comprehensive health and wellness benefits","company":"Artech","rawCompany":"artech","city":"Seattle","state":"WA","isRemote":false,"isActive":false,"createdAt":"2026-10-16T13:20:02.611Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior DevSecOps Engineer","description":"Senior DevSecOps EngineerWe are seeking a highly skilled and security-focused Senior DevSecOps Engineer to join the Akrites OSS Security Engineering team. This role is responsible for securing the open-source software ecosystem by analyzing, validating, and remediating vulnerabilities identified across critical OSS components and services.The engineer will work at the intersection of software engineering, security engineering, and cloud operations to strengthen software supply chain security and improve the security posture of open-source technologies.The ideal candidate possesses strong expertise in Java, Python, DevSecOps practices, vulnerability management, automation engineering, and cloud-native platforms, with a passion for driving secure development and operational excellence.This position will collaborate closely with client security engineering teams, open-source maintainers, and cross-functional product engineering groups to deliver scalable security solutions and sustainable remediation strategies.Key responsibilities include:OSS Vulnerability Analysis and RemediationAnalyze, triage, validate, and prioritize Open Source Software (OSS) vulnerabilities identified through security scanning platforms, Software Composition Analysis (SCA) tools, and vulnerability intelligence feeds.Perform technical investigations to determine exploitability, business impact, attack vectors, and remediation requirements.Develop and implement vulnerability fixes across OSS components using Java and Python, ensuring secure coding practices and compliance with security standards.Conduct root cause analysis for recurring vulnerabilities and recommend long-term mitigation strategies.Validate remediation effectiveness through code reviews, testing, proof-of-concept verification, and security assessment techniques.Secure Software Supply Chain EngineeringStrengthen software supply chain security through dependency management, secure package validation, and vulnerability governance practices.Partner with engineering teams to evaluate and remediate risks associated with third-party libraries, frameworks, and open-source dependencies.Support coordinated vulnerability disclosure and remediation workflows while maintaining confidentiality and security compliance.Contribute to vulnerability response activities from intake and validation through patch development, testing, and coordinated release processes.DevSecOps Platform EngineeringDesign, implement, and optimize DevSecOps workflows within the Akrites platform deployed on Google Cloud Platform (GCP). Integrate security controls into CI/CD pipelines, enabling automated vulnerability detection, policy enforcement, and remediation tracking.Enhance platform reliability, observability, and security through automation, infrastructure monitoring, logging, and operational analytics.Collaborate with development teams to embed security practices throughout the Software Development Lifecycle (SDLC).Essential Skills: Digital: Terraform; CodeQL; GitHub Advanced Security; Digital: Cloud Security; Security EngineeringCompany benefits and culture:• Inclusive and diverse work environment• Opportunities for professional growth and development• Comprehensive health and wellness benefits","datePosted":"2026-10-16T13:20:02.611Z","dateModified":"2026-10-16T13:20:02.611Z","hiringOrganization":{"@type":"Organization","name":"Artech","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Seattle","addressRegion":"WA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"bd3be44ee89682ac93a8a40d"},"url":"https://jobsearcher.com/jobs/bd3be44ee89682ac93a8a40d"}}