DevSecOps Engineer

The DevSecOps Engineer is responsible for implementing and maintaining secure software development practices across TEAM’s corporate and brand technology environments. This hands on role integrates application security tools, controls, and automated testing into development workflows to strengthen security throughout the software development lifecycle.

The DevSecOps Engineer partners with Cybersecurity, engineering teams, and technology leaders to improve application security, manage vulnerabilities, and establish consistent development standards while supporting HIPAA, SOC 2, and future IPO-readiness requirements.

Primary Responsibilities

Implement secure software development lifecycle (SDLC) standards, procedures, and controls across corporate and brand engineering teams, aligning practices with NIST and OWASP frameworks.

Deploy and maintain application security tools, including SAST, DAST, SCA, and secrets scanning, integrating automated security checks and quality gates into GibHub and CI/CD pipelines.

Manage application vulnerabilities through identification, prioritization, remediation, testing, and closure, supporting penetration testing and maintaining risk-based reporting and compliance evidence.

Review cloud and application security across AWS, Azure, and related environments, conducting threat modeling and strengthening controls for APIs, dependencies, containers, and infrastructure as code.

Partner with development teams to implement consistent security practices, improve segregation of duties, automate workflows, and provide technical guidance and training across the organization.

Qualifications:

5+ years of hands-on experience in DevSecOps, application security engineering, product security, or secure software development.

Experience integrating application security controls into GitHub-based source control and CI/CD workflows.

Practical experience with SAST, DAST, SCA, secrets scanning, vulnerability management, and developer remediation processes.

Working knowledge of NIST SP 800-218, OWASP SAMM, OWASP Top 10, and secure coding practices.

Experience securing applications and cloud deployments in AWS or Azure, including scripting and automation; healthcare or other regulated-environment experience preferred.

Skills

Secure software development lifecycle and application security

GitHub, CI/CD pipeline, and security automation

Vulnerability management, threat modeling, and remediation

AWS or Azure cloud security and Python, JavaScript, or similar scripting

Cross-functional collaboration, technical documentation, and developer enablement

Company-sponsored medical, dental, and vision plan for employees and their dependents

401(k) participation after 3 months of continuous service

Wellness program, learning development program

Life insurance, long-term disability coverage

Charitable contribution matching, volunteer time off, and employee assistance program

In addition to accrued vacation time and sick time, TEAM recognizes 12 paid federal holidays

24 Hour Home Care is an Equal Opportunity Employer that is proud of its culture of diversity and inclusion. Individuals seeking employment are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Additionally, 24 Hour Home Care will consider qualified candidates with criminal histories in a manner consistent with the law.

By completing this application, you are providing consent to receiving text messages from 24 Hour Come Care and associated vendors at the phone numbers provided. Message and data rates may apply.

For California applicants: by applying for this position, you acknowledge and consent to the collection, use, and disclosure of your personal information in accordance with our privacy policy and the California Consumer Privacy Act (CCPA).

The expected California Pay Range for this position:

$130,000 — $160,000 USD