Lead DevSecOps Engineer

The role

AEG is seeking a Lead DevSecOps Engineer to join its global Information Security organization. Reporting to the Vice President of Information Security, this role provides technical leadership for AEG's DevSecOps and Secure Software Development Lifecycle (SSDLC) programs, driving the integration of security throughout the software development lifecycle. The Lead DevSecOps Engineer partners closely with Engineering, DevOps, Platform Engineering, Infrastructure, and GRC teams to establish secure development standards, strengthen application and cloud security, secure CI/CD pipelines, and advance security automation and continuous compliance capabilities.

All jobs

Lead DevSecOps Engineer

AEG Worldwide, Los Angeles, CA

Posted pay

$140K–$160K

a year

Compared with similar jobs

This base pay is below the median for senior infrastructure, platform and SRE jobs in other US places.

Median: $181K a year
Other jobs in the group: 814

We compare the middle of each posted range. This is base pay as posted. The group does not include this job.

Location: Los Angeles, CA
Work type: Not given
Level: Senior
Experience: 5+ years
Skills in the job text: Python
AWS
Kubernetes
Azure
JavaScript
C#
PHP
Ruby
Posted: Sep 23, 2026
Last check: 8 h ago
Job type: Infra, platform & SRE

Apply on the AEG Worldwide site Sign in to save

The AEG Worldwide site opens in a new tab.

AEG Worldwide

Open tech jobs: 16
With posted pay: 69%
Median posted base: $125K–$140K

About AEG Worldwide: funding, hiring and pay

AEG Worldwide

About AEG Worldwide: funding, hiring and pay

Check my fit

Compare your résumé with this job. See where you match, what is missing and which lines to change.

The role

What you will do

Secure Software Development Lifecycle (SSDLC) Enablement:
Lead the development, implementation, and continuous improvement of the organization's Secure Software Development Lifecycle (SSDLC) program, partnering with Information Security and Engineering leadership to establish enterprise-wide secure development standards and practices.
Drive the integration of security-by-design principles and automated security controls across the software development lifecycle, ensuring consistent adoption across development, platform, and DevOps teams in collaboration with other engineers; lead security discussions with Engineering, DevOps, and Infrastructure teams to drive adoption of secure development practices.
CI/CD Pipeline Security:
Lead the architecture, strategy, and continuous maturation of enterprise CI/CD security capabilities, establishing secure-by-design standards for software delivery pipelines, deployment platforms, and development ecosystems.
Define and govern secure build processes, deployment workflows, container images, and third-party dependencies; drive and expand automation for security testing, validation, and policy enforcement; establish, integrate, and maintain security controls into build and deployment pipelines to support continuous compliance.
Security Tooling and Monitoring:
Lead the architecture, implementation, and governance of enterprise application security tooling establishing standards for SAST, DAST, and other application security tools.
Oversee the improvement of security visibility and monitoring across development environments; drive the configuration and maintenance alerts, notifications, and security monitoring capabilities.
Risk, Compliance, and Governance Support:
Lead enterprise application risk assessments and threat modeling exercises; establish and maintain the organization’s SDLC security requirements, procedures, and supporting documentation.
Document and monitor that compliance efforts align with ISO 27001, SOC 2, NIST, and related frameworks.
Application Security and Vulnerability Management:
Perform secure code reviews and work with development teams to remediate vulnerabilities; manage vulnerability reporting, remediation tracking, and disclosure processes.
Lead remediation efforts across engineering and development teams.
Security Consulting and Cross-Functional Partnership:
Serve as the lead security advisor and strategic partner with Engineering, DevOps, Platform, Infrastructure, and GRC teams to advance security initiatives.
Lead cross-functional security initiatives and provide practical security guidance throughout the design, development, and deployment lifecycle.
Define and maintain secure development standards and best practices; serve as a trusted security advisor for application and development-related initiatives.
Audit and Incident Response Support:
Lead the development and execution of security audits and evidence collection related to SDLC and application security controls.
Work with stakeholders on investigations and incident response activities involving applications and development environments.
Participate in control testing, validation, and compliance assessments.

What you need

BA/BS Degree (4-year) (Advanced Degree Preferred) Computer Science, Cybersecurity, Engineering, Information Systems, or related field. Master's degree or advanced certifications preferred.
5+ years Experience in DevSecOps, Application Security, Security Engineering, or related cybersecurity roles.
Proven experience integrating security throughout the software development lifecycle, including CI/CD pipelines and modern software delivery platforms.
Hands-on experience with application security testing tools, including SAST, DAST, SCA, and container security solutions.
Experience performing threat modeling, application risk assessments, vulnerability management, and remediation tracking.
Experience implementing monitoring, alerting, and security controls across cloud, application, and infrastructure environments.
Strong understanding of secure software development lifecycle (SSDLC) practices and secure coding principles.
Familiarity with modern application development frameworks and technologies, including Laravel and other enterprise web application frameworks.
Strong stakeholder management skills with the ability to build partnerships and align security objectives with business needs.
Ability to collaborate effectively with globally distributed teams and accommodate occasional meetings across multiple time zones.
Ability to manage multiple concurrent projects and adapt to changing priorities in a fast-paced environment.
Experience with programming languages including JavaScript, Python, Ruby, PHP, or C#.
Experience with CI/CD platforms such as GitHub Actions, Jenkins, CircleCI, Azure DevOps, or similar technologies.
Knowledge of application security testing methodologies including SAST, DAST, SCA, and container security scanning.
Experience with OWASP Top 10, NIST Secure Software Development Framework (SSDF), and related security frameworks.
Experience configuring application and infrastructure monitoring solutions, alerts, and notifications.
Familiarity with container technologies and cloud-native application deployment models.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent verbal and written communication skills.
Ability to work effectively within a highly collaborative global environment.
Self-motivated with strong ownership, accountability, and attention to detail.
Relevant certifications such as CISSP, CSSLP, GIAC Web Application Penetration Tester (GWAPT), GIAC Cloud Security Automation (GCSA), AWS Security Specialty, Microsoft Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), or equivalent certifications.

Lead DevSecOps Engineer

The role

Lead DevSecOps Engineer

The role

What you will do

What you need

Pay and benefits

About AEG Worldwide

Similar jobs at other companies

Security Engineer

Senior Security Engineer - AppSec (d/f/m)

DevSecOps Lead

Security Engineering Manager

Security Engineer

Senior DevOps Engineer

AEG Worldwide

Compared with similar jobs