Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this DevSecOps Engineer role.
Rezi rewrites your resume against Hospital for Special Surgery's job description. Free.
Tailor your resume to this DevSecOps Engineer role.
Rezi rewrites your resume against Hospital for Special Surgery's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the DevSecOps Engineer posting at Hospital for Special Surgery — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the DevSecOps Engineer posting at Hospital for Special Surgery — free, in seconds.
About the Role
HSS is a leading hospital for orthopedics and rheumatology, recognized by U.S. News & World Report and a recipient of the Magnet Award for Nursing Excellence. We offer an innovative, supportive, and inclusive environment for professionals at all career stages.
Responsibilities
- Partner with application development, data and analytics, infrastructure, cloud, architecture, and cybersecurity teams to embed secure-by-design principles.
- Design, implement, and maintain security controls within CI/CD pipelines, including automated testing and security gates.
- Manage and support application security capabilities like SAST, SCA, and secrets detection using tools such as Snyk, Wiz, and GitHub.
- Review application designs, architecture patterns, and data flows to identify security risks and recommend remediation.
- Support threat modeling, secure code review, and security design reviews throughout the software development lifecycle.
- Validate, prioritize, and track remediation of vulnerabilities across applications, cloud, containers, and infrastructure.
- Review cloud resources, Infrastructure as Code templates, and container images against organizational policies and best practices.
- Develop scripts, integrations, dashboards, and automated workflows to improve security testing and vulnerability management.
- Create metrics, reports, diagrams, runbooks, standards, and technical documentation for various audiences.
- Support audits, assessments, compliance activities, and control validation requests related to application security and cloud security.
- Perform other related duties as assigned.
Requirements
- Bachelor’s degree in computer science, information technology, cybersecurity, software engineering, data engineering, or a related field, or equivalent experience.
- Seven or more years of professional IT experience with five or more years in DevSecOps, application security, cloud security, software engineering, infrastructure engineering, security engineering, or a related technical role.
- Working knowledge of secure software development lifecycle practices, application security principles, cloud security concepts, CI/CD security, and vulnerability management.
- Experience with CI/CD platforms such as GitHub Actions, Azure DevOps, GitLab CI, Jenkins, or similar tools.
- Experience with cloud platforms such as Microsoft Azure, AWS, or similar environments.
- Familiarity with application security and software supply chain security capabilities such as SAST, SCA, secrets scanning, dependency analysis, container scanning, and Infrastructure as Code scanning.
- Experience with scripting, automation, source control, code review processes, and development workflows using tools and languages such as Git, Python, PowerShell, Bash, JavaScript, or similar.
- Ability to assess technical environments, identify security gaps, evaluate risk, and recommend practical remediation activities.
- Strong written and verbal communication skills, including the ability to explain technical security concepts to diverse audiences.
- Excellent analytical, problem-solving, troubleshooting, organizational, and prioritization skills.
Skills
- Secure-by-design principles
- CI/CD security controls
- SAST
- SCA
- Secrets detection
- Dependency review
- Code security scanning
- Threat modeling
- Secure code review
- Security design reviews
- Vulnerability management
- Cloud security
- Container security
- Infrastructure as Code security
- Scripting
- Automation
- Integration development
- Dashboard creation
- Workflow automation
- Reporting
- Technical documentation
- Audit support
- Compliance activities
- Risk assessment
- Problem-solving
- Communication
- Collaboration
- Risk-based evaluation
- Secure development practices
Work Type
- Regular Full time
Education Level
- Bachelor’s degree in computer science, information technology, cybersecurity, software engineering, data engineering, or a related field, or equivalent experience.
Salary/Compensations
- $132,000.00 - $201,500.00
Benefits
- Eligible for additional benefits consistent with the role.
About the Company
- HSS is consistently among the top-ranked hospitals for orthopedics and rheumatology by U.S. News & World Report.
- Recipient of the Magnet Award for Nursing Excellence, HSS was the first hospital in New York City to receive the distinguished designation.
- HSS provides an innovative, supportive and inclusive environment.
- Working with colleagues who love what they do and are deeply committed to our Mission, you too can be part of our transformation across the enterprise.
Equal Opportunity
- Hospital for Special Surgery is committed to providing high quality care and skilled, compassionate, reliable service to our community in a safe and healing environment.
- Hospital for Special Surgery provides care, admits, and treats patients and provides all services without regard to age, race, color, creed, ethnicity, religion, national origin, culture, language, physical or mental disability, socioeconomic status, veteran or military status, marital status, sex, sexual orientation, gender identity or expression, or any other basis prohibited by federal, state, or local law or by accreditation standards.