Senior DevSecOps Engineer

We Core Solutions INC are looking for Senior DevSecOps Engineer

Experience - 10+ years

Notice Period - Immediate - 30 days

Location - Guindy (WFO)

Interested candidate can apply here or share your updated CV to arunv@coresolutionsinc.com

Position Summary

We are seeking an experienced Senior DevSecOps Engineer to be part of our technical transformation as we transition to a SaaS-first organization. This technical role shall be focused on integrating security

practices throughout the software development life-cycle, primarily through automation and

infrastructure as code. Senior DevSecOps Engineer shall be responsible for design, implement, and

manage secure cloud infrastructure and CI/CD pipelines, ensuring robust security controls and

compliance. This role often involves mentoring junior engineers, leading initiatives, and fostering a culture of continuous improvement.

Senior DevSecOps Engineer

• Own the security design and implementation of CI/CD pipelines (GitHub Actions, GitHub,
• Octopus, etc.).
• Design and enforce secure infrastructure-as-code (IaC) patterns (Terraform, Cloudformation).
• Implement policy-as-code frameworks (OPA, Sentinel) across Kubernetes and cloud
• environments (AWS, GCP, Azure preferably AWS).
• Perform threat modeling and risk assessments across microservices and deployment
• architecture.
• Drive end-to-end integration of SAST, DAST, SCA, secrets scanning, and container scanning tools
• into pipelines (e.g., SonarQube, Burpsuite etc).
• Lead initiatives around zero-trust architecture, least privilege IAM automation, and secure
• baseline enforcement.
• Collaborate with developers, SREs, and product managers to drive a security-first culture.
• Mentor and guide junior DevSecOps and DevOps engineers.

Requirements

• 10+ years of overall experience with over four years in DevOps, Cloud, and Security.
• Deep expertise in AWS/GCP security services (IAM, KMS, VPC, WAF, Shield, S3, RDS, ECS etc.).
• Hands-on with IaC and CI/CD (Terraform, Cloudformation etc.).
• Strong proficiency with scripting (Python, Bash, Powershell, Nodejs etc).
• Expertise in Container security (Sysdig, SecurityPolicies etc.).
• Familiar with compliance frameworks (SOC2, HIPAA, NIST etc.) and automating controls.
• Experience in threat modeling and security risk assessments.

Nice to Have

• OSCP, CISSP, AWS Security or GIAC certifications.
• Experience in building secure SDLC in SaaS-based or multi-tenant platforms.

About us

• Core Solutions (CORE), headquartered in King of Prussia, Pennsylvania, is the progressive leader in transforming the behavioral, medical and social services experience for behavioral health providers, consumers and state agencies.
• Our integrated behavioral health EHR platform, Cx360, allows for the improvement of the provider, consumer and payer relationship through increased consumer-centric collaboration which results in improved outcomes.
• Accomplishment through our ability to simplify the end-to-end behavioral health experience, deliver integrated care coordination, improve consumer engagement and streamline accurate provider reimbursement..
• CORE believes the key to successful implementation of EHR solutions is aligning people and processes with technology. Core’s strong Cx360 EHR Technology Platform (versus traditional EHR Products)

Company url: