DevSecOps: market
A DevSecOps Engineer embeds security into the delivery pipeline: code, dependency and image scanning, policies for infrastructure as code, secrets management and runtime protection. We currently track 812 open positions for this role, 786 of them fresh. Postings expect DevOps experience (CI/CD, Kubernetes, cloud) plus security tooling: SAST/DAST and SCA (Semgrep, SonarQube, Trivy), policies (OPA, Kyverno), secrets (Vault). By co-occurrence in requirements, DevSecOps, AWS, SRE and Kubernetes appear most often. 50% of the postings allow fully remote work. Below is a live slice of the DevSecOps Engineer market: geography, seniority, adjacent stack and sources.
The DevSecOps market currently has 812 open roles, 786 of them freshly observed. Median salary $9,000/mo.
50% of DevSecOps Engineer postings allow fully remote work; the share counts only postings that state the format.
⚠ salary known for 39 of 812 jobs; remote share from 659 with a stated format; 786 counted as fresh observations; trend and hiring difficulty are not shown
Timeline: postings and sources
How many DevSecOps postings appeared each week since 4 May, and from how many sources. The second line separates market growth from coverage growth: a jump in the week new sources were connected means we started seeing more, not that the market grew.
New postings and active sources per week
Sources over the period: 121
New sources connected: 11 May +4 · 18 May +3 · 25 May +5 · 1 Jun +3 · 8 Jun +1 · 15 Jun +4 · 22 Jun +9 · 29 Jun +16 · 6 Jul +13 · 13 Jul +7 · 20 Jul +11 · 27 Jul +4 · 3 Aug +1 · 10 Aug +1 · 17 Aug +3 · 24 Aug +3 · 31 Aug +3 · 7 Sept +2 · 14 Sept +2 · 21 Sept +8 · 28 Sept +1 · 5 Oct +2 · 12 Oct +8
Week = posting first-seen date, all statuses; postings are selected by the same rule as this page's counter. Sources are distinct collection channels; their names are not published.
Remote work over time
Share of DevSecOps postings offering fully remote work, per week.
Remote postings, %
The share is among postings that state a format (remote, hybrid, office). Weeks with fewer than 10 such postings are left blank.
Technologies over time
How the share of DevSecOps postings mentioning each of the top technologies changed.
Postings mentioning the technology, %
Share among postings with a tagged stack; the series starts on 10 Aug: earlier stack tags were assigned differently. Weeks with fewer than 20 tagged postings are left blank.
Countries over time
How the share of DevSecOps postings in each of the top countries changed, per week.
Postings in the country, %
Share among postings with a known country; the chart shows the five countries with the most postings over six months. Weeks with fewer than 20 postings with a known country are left blank. A rising share can mean a newly connected source in that country rather than market growth.
Demand and observed supply: DevSecOps
| Open demand | 812 |
| Observed supply | — not published |
⚠ candidates matching a vacancy are not counted yet: demand and the observed pool are shown
Salary distribution: DevSecOps
One in ten earns under $3,985, one in ten over $15,833. Half the market falls between $7,617 and $12,346. Sample: 39.
The range histogram for DevSecOps Engineer uses only postings with an explicit compensation range; the median is computed over the same sample.
Demand geography: DevSecOps
| country | jobs |
|---|---|
| US | 187 |
| PL | 79 |
| SG | 51 |
| GB | 46 |
| MX | 44 |
| DE | 34 |
| BR | 27 |
| FR | 22 |
| PE | 20 |
| RU | 19 |
The top country for DevSecOps Engineer demand is the US (187 positions).
⚠ job counts only: salary by country is not published
Used together with
In DevSecOps Engineer requirements the most frequently named skills and technologies are DevSecOps, AWS, SRE and Kubernetes.
Demand by grade: DevSecOps
| grade | jobs |
|---|---|
| senior | 168 |
| middle | 35 |
| principal | 31 |
| lead | 26 |
| junior | 6 |
Senior-and-above is about 85% of 266 DevSecOps Engineer postings with an explicit grade.
⚠ demand side only: the grade of the observed pool is unknown for most of it
Employers: DevSecOps
Demand is spread across 389 employers. The largest accounts for 26.3%, the top ten for 35.9%; the remaining 64.1% is long tail.
| share | value |
|---|---|
| top-1 | 26.3% |
| top-3 | 29.3% |
| top-10 | 35.9% |
| long tail | 64.1% |
DevSecOps Engineer openings come from 389 distinct employers.
⚠ names are not shown: staffing agencies and end employers are not yet told apart by the classifier
Where Zorky sees this market
Observed across 65 sources; the largest accounts for 28.0% — this market does not rest on a single channel.
DevSecOps Engineer postings arrive mostly from ATS & career sites and job boards & aggregators.
Recent openings: DevSecOps
- Automation / DevSecOps H/F · FR
- Senior DevSecOps Engineer · PT
- AWS DevSecOps Engineer · SE
- DevSecOps Engineer · UA
- Senior AWS DevSecOps Cloud Consultant · US
- Senior DevSecOps, Cloud Consultant · US
- AWS DevSecOps Cloud Consultant · US
- DevSecOps Engineer (Middle/Middle+) — Fintech | AI-Native продукты · RU
Adjacent markets
⚠ adjacent markets for comparison are not defined yet
How this is measured
- Vacancy
- an open job that cleared the quality gate and lists at least two technologies
- Observed candidate
- a candidate whose stack contains this technology; an aggregate — not a single record leaves the perimeter
- Matchable candidate
- not counted yet
- Window
- jobs open at the moment the snapshot was built
About the data
- Some breakdowns are hidden: their data coverage is not yet sufficient.
- Statistics are shown only where the sample clears a quality gate.
- A missing block does not mean a value of zero.
Breakdowns currently hidden: 8.
Data as of 2026-10-23
Frequently asked questions
Common questions about the DevSecOps Engineer role — short answers from the same data slice.
What does a DevSecOps Engineer do?
A DevSecOps Engineer embeds security into the delivery pipeline: code, dependency and image scanning, policies for infrastructure as code, secrets management and runtime protection.
Which skills do DevSecOps Engineer postings require?
Postings expect DevOps experience (CI/CD, Kubernetes, cloud) plus security tooling: SAST/DAST and SCA (Semgrep, SonarQube, Trivy), policies (OPA, Kyverno), secrets (Vault). In the current slice, DevSecOps, AWS, SRE and Kubernetes appear in requirements most often.
How do people move into DevSecOps?
Most often from DevOps by adding security, or from AppSec by adding automation. A practical start is embedding scanners into your own pipeline and triaging the findings.
How remote-friendly are DevSecOps Engineer jobs?
50% of postings with an explicit format allow fully remote work; the slice tracks 812 open positions.
Get the full DevSecOps market details
Full role analytics — salary bands, employers, trends and available candidates. Leave a contact and we'll send the details.