Senior DevSecOps Engineer
Impinj, Seattle, Washington +1
What you will do
- Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight
- Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning
- Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
- Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies
- Manage the company’s software development life cycle policy alongside Information Security leadership
- Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder