Senior DevSecOps Engineer Needed for CI/CD Pipeline Setup Overhaul

LumenWorks

Contract · Remote · Flexible hours

About the role

LumenWorks is gearing up for a major app store launch that tightly couples its mobile front‑end with backend services. We need a Senior DevSecOps Engineer to bridge security and delivery pipelines, ensuring the new release meets compliance and performance targets.

Key responsibilities

• Design and implement a secure CI/CD workflow in GitHub Actions for the mobile‑backend integration.
• Containerize backend microservices with Docker and enforce image scanning using Trivy.
• Configure AWS CodePipeline and CodeBuild to automate security testing, static analysis, and deployment to the "Nebula" staging environment.
• Integrate secret management via AWS Secrets Manager and enforce least‑privilege IAM roles for mobile SDKs.
• Set up automated threat modeling and SAST/DAST scans for the upcoming app store release milestones.
• Collaborate with mobile engineers to embed security checks into the React Native build process.

Must-have skills

• Extensive experience with CI/CD tools (GitHub Actions, Jenkins, or similar).
• Deep knowledge of container security (Docker, image scanning, runtime policies).
• Proficiency in AWS services, especially IAM, Secrets Manager, and CodePipeline.
• Hands‑on with SAST/DAST tools (SonarQube, OWASP ZAP) and threat modeling.
• Strong scripting ability in Bash/Python for automation.

Nice to have

• Experience securing mobile SDKs and app store compliance.
• Familiarity with Kubernetes and service mesh security.