Senior DevSecOps Engineer Needed for Customer-Facing Security Automation

Ridgeline Software

Contract · Remote · Flexible hours

About the role

Ridgeline Software is building a next‑gen analytics platform and needs a Senior DevSecOps Engineer to drive a test‑automation uplift. The focus is on embedding security checks into CI pipelines to cut regression risk before each release. You will own the automation framework for the "PulseGuard" module, ensuring secure, repeatable deployments.

Key responsibilities

• Design and implement a Selenium‑based regression suite integrated with Jenkins for the PulseGuard microservice.
• Containerize security scanning tools (OWASP ZAP, Trivy) and embed them into GitHub Actions.
• Develop Terraform scripts to provision isolated test environments on AWS for each build.
• Configure SAST/DAST pipelines using SonarQube and Fortify, establishing gate thresholds.
• Collaborate with QA leads to define automated test cases that cover authentication and data‑integrity scenarios.
• Document the automation workflow and handover procedures for the post‑launch team.

Must-have skills

• Extensive experience with CI/CD tools (Jenkins, GitHub Actions) and Docker.
• Strong background in security testing (SAST, DAST, container scanning).
• Proficiency in AWS services (ECS, CodeBuild, CloudFormation/Terraform).
• Automation scripting in Python or Bash.
• Knowledge of microservice architectures and API security.

Nice to have

• Familiarity with Chaos Engineering for resilience testing.
• Experience with Kubernetes security policies.