DevSecOps Engineer

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life. The Position We are seeking a hands-on DevSecOps Engineer to embed automated security into software delivery.

focuses on CI/CD security, security scanning, risk-based gates, Secure SDLC baselines, and vulnerability remediation across product and internal engineering teams. You will partner with AppSec, Product Engineering, Platform/SRE, and Security Operations to deliver reusable controls, developer-friendly feedback, and measurable security outcomes. Core

Integrate secret scanning, SAST, SCA/SBOM, container, IaC, and appropriate DAST checks into pull request, build, and release workflows. Implement risk-based CI/CD security gates, false-positive handling, and documented exceptions. Build scripts and API integrations for scan aggregation, ticketing, evidence collection, and security reporting.

Maintain visibility into scan coverage, gate decisions, vulnerability trends, and control adoption. Enable Product Secu