[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. Mastercam is a manufacturing software company focused on digital transformation and innovative solutions for manufacturers. The DevSecOps Security Engineer will secure and govern cloud-native application platforms, AI-enabled solutions, and supporting infrastructure by integrating security into the software development lifecycle. The role will implement and maintain controls across Kubernetes, CI/CD pipelines, identity and access management, secrets, APIs, monitoring, and AI workloads.

Responsibilities

• Secure Kubernetes-based platforms and containerized workloads
• Implement and maintain Kubernetes security controls including RBAC, Network Policies, Pod Security Standards, and namespace segmentation
• Perform security reviews of platform architecture and application deployments
• Develop infrastructure hardening standards and security baselines
• Integrate security controls into CI/CD pipelines
• Implement automated vulnerability scanning, code analysis, and compliance checks
• Establish secure software supply chain processes
• Partner with development teams to remediate vulnerabilities and improve secure coding practices
• Develop and maintain security guardrails within GitOps workflows
• Secure authentication and authorization systems
• Implement least-privilege access controls across applications and infrastructure
• Support identity federation, Single Sign-On (SSO), OAuth2, OpenID Connect, and Multi-Factor Authentication (MFA)
• Review systems for access governance and privileged access risks
• Implement secure management of secrets, certificates, encryption keys, and service credentials
• Support automated secret rotation and certificate lifecycle management
• Ensure secure application integration with centralized secrets management platforms
• Secure API gateways and service-to-service communications
• Review API implementations against OWASP API Security standards
• Implement authentication, authorization, rate limiting, and API threat protection controls
• Support Zero Trust networking initiatives
• Create dashboards and alerts for security events
• Develop security metrics and monitoring capabilities
• Collaborate with operations teams during security investigations and incident response activities
• Analyze platform telemetry and audit logs to identify threats and control gaps
• Support security reviews for AI and machine learning workloads
• Assist with implementing controls to protect against prompt injection, sensitive data exposure, and model misuse
• Participate in AI governance and risk assessment activities
• Evaluate emerging risks associated with Large Language Models (LLMs), vector databases, and AI platforms

Skills

• This position requires expertise in cloud-native technologies, Kubernetes, container security, CI/CD environments, and modern application security practices, along with the ability to contribute to emerging AI and platform security initiatives
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered
• 4 - 5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering
• 1+ year of hands-on experience supporting Kubernetes or containerized application environments
• Experience securing cloud-native applications and services
• Experience implementing vulnerability management and application security programs
• Experience working with software development teams and CI/CD pipelines
• Experience supporting cloud environments such as AWS, Azure, or Google Cloud
• Knowledge of:
• Kubernetes architecture
• Pods, Deployments, Services, and Ingresses
• RBAC
• Network Policies
• Container security
• Workload isolation
• Cluster security fundamentals
• Experience with:
• Docker
• Container image security
• Image scanning
• Vulnerability remediation
• Secure image lifecycle management
• CI/CD pipelines
• Source code management platforms
• Git workflows
• Automation and scripting
• Understanding of:
• SAST
• DAST
• Dependency scanning
• Secret scanning
• Infrastructure-as-Code security
• OAuth2
• OpenID Connect
• SAML
• MFA
• Role-Based Access Control
• Vulnerability management
• Threat detection
• Security monitoring
• Incident response support
• Risk assessments
• Ability to automate security processes using:
• Python
• Bash
• PowerShell
• Experience with any of the following technologies is highly desirable:
• Kubernetes
• Istio
• FluxCD
• APISIX
• OpenTelemetry
• Grafana
• Keycloak
• OpenBao
• HashiCorp Vault
• Azure Entra ID
• AWS IAM
• PostgreSQL
• RabbitMQ
• Qdrant
• Amazon Bedrock
• Generative AI applications
• Retrieval Augmented Generation (RAG)
• Vector databases
• LLM Security
• Knowledge of:
• OWASP Top 10
• OWASP API Security Top 10
• OWASP Top 10 for LLM Applications
• NIST Cybersecurity Framework
• CIS Benchmarks
• Zero Trust Architecture
• Secure Software Development Lifecycle (SSDLC)
• One or more of:
• Security+
• Certified Kubernetes Administrator (CKA)
• Certified Kubernetes Security Specialist (CKS)
• AWS Certified Security Specialty
• CISSP
• CCSP
• GIAC Certifications

Company Overview

Company H1B Sponsorship