Senior DevSecOps Engineer

Rightsline is looking for a security-focused Sr DevSecOps Engineer to join our 100% remote team. This role is a unique hybrid, splitting your time 50/50 between operational stability — investigating security incidents and maintaining system health — and proactive engineering, where you will build, automate, and harden our infrastructure. Reporting to the DevOps Manager, you will be a key contributor to the safety and integrity of our AWS and Active Directory environments. You will be working in a collaborative environment with a team who shares your passion for building impactful solutions with cutting edge technology. Mission & Impact This role keeps Rightsline’s AWS and Active Directory environments safe, stable, and audit-ready. You will be accountable for how quickly security incidents are investigated and resolved, how much of our infrastructure hardening and patching is automated rather than manual, and how consistently security standards are enforced across the organization. Success looks like fewer repeat incidents, a steadily hardened environment, and teammates who can rely on you for security guidance and mentorship. What You Will Own This role spans two areas, each described below. Operational Stability Mentor team members on security best practices, automation, and infrastructure design Investigate, analyze, and document security incidents using AlertLogic and AWS Security Hub in accordance with our Incident Response Plan Maintain system health through monitoring (CloudWatch), emergency escalation, and proactive issue resolution Manage and apply critical security patches using AWS SSM Patch Manager and Endpoint Central Manage Identity and Access (IAM) for internal and external users (AWS/Active Directory) Engineering & Strategy Actively harden infrastructure by implementing IAM Identity Center and advanced network access controls Contribute to the creation and maintenance of auditing security policies to ensure enterprise-wide compliance Develop AWS Lambda functions or container-hosted services for automation and monitoring Implement Infrastructure as Code (Terraform) and system provisioning (Ansible, AWS Image Builder) Help manage code deployments (GitHub, CodeBuild, CodeDeploy, CodePipeline) Collaborate with cross-functional leadership (Engineering, Product) to align infrastructure strategy with business objectives Drive the definition, enforcement, and continuous improvement of internal security procedures and system standards What You Will Bring 3+ years of experience working in a security engineering role 2+ years of experience in software development or automation scripting 2+ years of experience working with workloads running in a cloud environment 2+ years working with a Windows server environment A strong desire and proven ability to reduce toil through the use of automation Excellent verbal and written communication skills Ability to effectively work in an autonomous manner and deliver consistent results with little oversight AWS or other cloud hosting environments experience Programming or scripting language(s) (Python, Node, C#, Golang, Bash, etc.) Experience building out automation with the help of LLMs Familiarity with using command line tools Version control systems experience (Git) Docker containers (building and running) Expertise in CI/CD build, deploy, and test pipelines (e.g., Jenkins, CodeBuild, GitHub Actions) Expertise with IAM Identity Center, AWS Security Hub, and security architecture tools Familiarity with patch management tools (AWS SSM Patch Manager, Endpoint Central) Basic Windows server administration experience Basic computer networking knowledge (VPCs, subnets, NAT, routing, etc.) Preferred Qualifications: Security Operations: Experience with SIEM, IDS, WAFs, or network ACLs Infrastructure & IaC: Expertise with Terraform, CloudFormation, or Ansible CI/CD Mastery: Familiarity with GitHub Actions or complex AWS CodePipeline architectures Containerization: Experience with ECS, EKS, or other orchestration tools Active Directory: Experience maintaining enterprise-level AD domains Our Core Values At Rightsline, we look for these qualities in every hire, and we hold ourselves to them every day. Be Curious and Smart Being smart isn't about having all the answers — it's about asking the right questions, seeking out new ideas, and never assuming you already know enough. Embrace Change This industry moves fast and so do we. We don't resist change — we lean into it. That means staying flexible, letting go of what isn't working, and treating uncertainty as opportunity rather than obstacle. Show Up Showing up means being present — not just physically, but mentally and emotionally. Your teammates count on you. Your customers count on you. We do our best work when everyone is fully engaged and accountable to each other. Get it Done Ideas are easy. Execution is the job. We hold ourselves to what we commit to, push through the hard parts, and measure success by our actual accomplishments. Be Humble Nobody here has a monopoly on good ideas. We listen more than we talk, share credit freely, and check our egos at the door. The best outcome matters more than whose idea it was. Equal Employment Opportunity Rightsline is an equal opportunity workplace. All candidates will be afforded equal opportunity through the recruiting process. We do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, disability, gender identity and/or expression. We are dedicated to growing a diverse team of highly talented individuals and creating an inclusive environment where everyone feels empowered to bring their authentic selves to work. If you are contacted for an interview and require accommodation during the interviewing process, please let us know. Apply Today If you want to join a company that strives for a mission, purpose and making an impact, we encourage you to apply today.