Devsecops jobs in Massapequa, New YorkCreate job alerts

Job DescriptionWe’re one of the country’s largest energy companies, with a vision of powering a future where people use energy more efficiently and it’s safer and delivered more reliably than ever. We’re also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day. Here, you’ll have the stability and exciting opportunities that come with being a Fortune 500 company — along with a supportive, friendly work environment where your contributions are valued. We offer a flexible work environment designed to balance employee needs with collaboration and operational excellence. Roles fall into two categories: • Onsite: Employees work onsite daily., • Hybrid: A blend of remote and onsite work, with at least three onsite days per week required. As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits designed to support your total well-being: medical, dental, vision, paternal leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off. More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you’re looking for a place where you can build a meaningful career and help power and support our communities, we’d love to welcome you to the team.PSEG is not offering visa sponsorship for this position. Job Summary:We are seeking an experienced DevSecOps Engineer who can build, integrate, and operationalize security within our DevOps processes and CI/CD pipelines. This role will focus on embedding security controls into the software development lifecycle, securing cloud infrastructure, and ensuring that applications and APIs meet enterprise security and compliance requirements. Using a modern technology stack and agile approach, you will work closely with development, infrastructure, and cybersecurity teams to integrate automated security testing, vulnerability management, and compliance validation across our development and cloud environments. Job Responsibilities: • Integrate security controls into CI/CD pipelines to enable secure and automated software delivery., • Develop and maintain DevSecOps pipelines that incorporate security scanning, code analysis, and compliance checks., • Implement automated security testing including:, • Static Application Security Testing (SAST)., • Software Composition Analysis (SCA)., • Container image scanning., • API security testing., • Integrate and operationalize code security capabilities including code scanning, secret detection, and dependency vulnerability monitoring., • Implement and maintain API security controls using tooling to monitor and protect enterprise APIs., • Support container security practices including image scanning, artifact security, and repository management (e.g., Sonatype Nexus or equivalent)., • Work with development teams to remediate vulnerabilities identified through automated security tooling and penetration testing., • Implement security best practices for cloud-native architectures, including infrastructure-as-code security validation., • Support cloud security posture management (CSPM) initiatives to ensure cloud environments remain compliant with security policies and regulatory requirements., • Develop automation scripts and tooling to support DevSecOps processes., • Collaborate with security, infrastructure, and development teams to maintain secure deployment pipelines and reduce application security risk., • Provide guidance and training to development teams on secure coding practices and DevSecOps principles. Job Specific Qualifications: • BS degree or higher with 4+ years of professional experience in DevOps Engineering or DevSecOps Engineering., • In place of a degree, candidates with 8+ years of hands-on experience working with DevSecOps tooling, methodologies, and processes will be considered., • CI/CD Pipeline Security: Proven track record building, securing, and maintaining Continuous Integration and Continuous Deployment (CI/CD) pipelines with integrated security controls., • CI/CD Platforms: Proficiency with major CI/CD platforms (e.g., Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps)., • Application Security Testing: Direct experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies., • API Security: Demonstrated ability implementing API security solutions and protecting application endpoints., • Container & Artifact Security: Expertise in container security (e.g., Docker, Kubernetes) and managing secure artifact repositories (e.g., JFrog Artifactory, Nexus)., • Cloud Security: Deep background working with public cloud platforms (AWS, Azure, or GCP) and securing cloud infrastructure., • CSPM: Familiarity with Cloud Security Posture Management (CSPM) tools (e.g., Wiz, Prisma Cloud, Orca Security)., • Core Competencies: Strong professional communication, cross-functional collaboration, and team-building skills. Desired Skills: • Prior work with Infrastructure as Code (IaC) tools, such as Terraform, CloudFormation, or Ansible., • Ability to write scripts and automation workflows using Python, Bash, or similar programming languages., • Familiarity with automated code scanning, dependency scanning, and secret detection / secret management tools., • Direct exposure to Software Composition Analysis (SCA) tools and open-source vulnerability scanning., • History of supporting and scaling Secure Software Development Lifecycle (SSDLC) initiatives., • Practical knowledge supporting IT compliance and cloud governance frameworks, including NIST, CIS Benchmarks, or SOC 2., • Collaborative background interfacing with Vulnerability Management infrastructure or Penetration Testing teams. Some positions at PSEG require access to information covered by the Department of Energy’s regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a “Generally Authorized” destination on the attached list and not also a citizen, national, permanent resident of any country not listed; OR (4) a “Protected Individual” under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)). As an employee of PSEG Long Island, you should be aware that during storm/outage restoration efforts, you may be required to perform functions different from normal operations and work extended hours beyond your regular work schedule. You may also be required to work on premise or in an alternate location as directed by the company. For all roles, PSEGLI’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. Employees who are hired or transfer into a federally regulated role (including positions covered by USDOT, PHMSA, or NRC regulations) are subject to random drug and alcohol testing, inclusive of marijuana. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and medically, the use of these products are prohibited for employees in federally regulated roles. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for a positive result. If you are a current PSEG employee and offered an opportunity with PSEG Long Island, you will be treated as a new hire. Please note that as a new hire to the Long Island subsidiary, your benefits will change and generally will be consistent with other similarly situated PSEG Long Island new hires. Similarly, for PSEG Long Island employees who accept job opportunities with PSEG or any of its subsidiaries (other than PSEG Long Island), their benefits will change and generally be consistent with other similarly situated new hires of that company.

Job DescriptionWe’re one of the country’s largest energy companies, with a vision of powering a future where people use energy more efficiently and it’s safer and delivered more reliably than ever. We’re also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day.Here, you’ll have the stability and exciting opportunities that come with being a Fortune 500 company — along with a supportive, friendly work environment where your contributions are valued. We know life isn’t one-size-fits-all, and neither is work. That’s why we offer flexible work options depending on the role. In support of this model, roles have been categorized into one of three work location categories: Onsite – roles where employees are expected to be onsite daily. Hybrid fixed – roles that are a mix of remote work and onsite work fixed days each week. Hybrid flexible – roles that are a mix of remote work and onsite work, but the onsite requirements have greater flexibility. (i.e. 5-8 days a month vs. set days each week).As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits designed to support your total well-being: medical, dental, vision, paternal leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off.More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you’re looking for a place where you can build a meaningful career and help power and support our communities, we’d love to welcome you to the team.PSEG is not offering visa sponsorship for this posit Job Summary:This position leads Information Security staff in the evaluation of risks and threats, development, implementation, communication, operation, monitoring and maintenance of the IT security policies and procedures to promote secure and uninterrupted operation of all IT systems, applications and infrastructure. In this role, you will be responsible for proactively identifying, prioritizing, and tracking security vulnerabilities across the PSEG’s network and systems. You will also be responsible for conducting security assessments, running penetration tests, review Cyber threat intelligence and providing relevant data to parties to action upon. This role will perform red team exercises mimicking adversary practices while leveraging similar tools and techniques. To be successful in this role you must have a broad understanding of information security and experience in application security, DevSecOps (Development, Security, and Operations) vulnerability management, and cyber exploitation techniques in an evolving artificial intelligence driven world. You must also possess excellent problem-solving and communication skills and proven people management experience. Job Responsibilities: • Cyber Assessment & Vulnerability Management lead is responsible for the overall lifecycle of the Cyber Assessment & Vulnerability Management program., • Inform, advise, and partner with IT, Security, and other business units to help better secure their operations. Identify gaps in current processes, workflows, and design and recommend changes or enhancements as needed., • Participate in Change Management Process, from early Assessment of proposed changes/enhancements, through Vulnerability scanning and recommended remediation before go-live., • Participate in incident response activities as needed. Ensure cross-company processes around threat & vulnerability management are adhered to. This includes tracking SLAs, discovery, and handling of any finding. Maintain situational awareness, identification, tracking, and ensuring action on industry news related to software vulnerabilities, including zero-day vulnerabilities and emergency patching., • Implement and operationalize advanced Vulnerability Management reporting tools. Design, develop and operationalize Vulnerability Management metrics. Design and Implement advanced Vulnerability dashboards. Evaluate performance, perform career development, coaching and counseling and manage compensation for Cyber assessment staff., • Responsible for conducting security assessments & penetration tests. Review Cyber threat intelligence and ensures and provide relevant data to parties within the Cyber Assessment & Vulnerability management teams to action upon. Oversee regular red team exercises to proactively emulate attackers TTP and report back findings so security engineering and operations can improve their defenses., • Create, perform tabletop exercises exercising mimicking adversary practices testing PSEG LI’s ability to respond to cyber incidents. Job Specific Qualifications: • Bachelor's degree and 8 years of relevant cyber security experience, • Candidates without a degree, will need 12 years of cyber experience., • Experience within vulnerability/compliance management, penetration testing, and/or threat hunting., • Ability to present to all levels of management and executive leadership., • Excellent teamwork, facilitation, relationship building, and negotiation skills., • Able to maintain positive working relationships both leading and as part of a team., • Effective time management skills and able to multi-task effectively., • Able to communicate effectively with both technical and non-technical individuals., • Compliance with the Department of Energy's regulation 10 CFR 810 is required. Desired: • Certified Information Systems Security Professional (CISSP), or equivalent.

Job Summary We are seeking an experienced DevSecOps Engineer who can build, integrate, and operationalize security within our DevOps processes and CI/CD pipelines. This role will focus on embedding security controls into the software development lifecycle, securing cloud infrastructure, and ensuring that applications and APIs meet enterprise security and compliance requirements. Using a modern technology stack and agile approach, you will work closely with development, infrastructure, and cybersecurity teams to integrate automated security testing, vulnerability management, and compliance validation across our development and cloud environments. Job Responsibilities • Integrate security controls into CI/CD pipelines to enable secure and automated software delivery., • Develop and maintain DevSecOps pipelines that incorporate security scanning, code analysis, and compliance checks., • Implement automated security testing including:, • Static Application Security Testing (SAST), • Software Composition Analysis (SCA), • Container image scanning, • API security testing, • Integrate and operationalize code security capabilities including code scanning, secret detection, and dependency vulnerability monitoring., • Implement and maintain API security controls using tooling to monitor and protect enterprise APIs., • Support container security practices including image scanning, artifact security, and repository management (e.g., Sonatype Nexus or equivalent)., • Work with development teams to remediate vulnerabilities identified through automated security tooling and penetration testing., • Implement security best practices for cloud-native architectures, including infrastructure-as-code security validation., • Support cloud security posture management (CSPM) initiatives to ensure cloud environments remain compliant with security policies and regulatory requirements., • Develop automation scripts and tooling to support DevSecOps processes., • Collaborate with security, infrastructure, and development teams to maintain secure deployment pipelines and reduce application security risk., • Provide guidance and training to development teams on secure coding practices and DevSecOps principles. Job Specific Qualifications • BS degree or higher with 4+ years of professional experience in DevOps Engineering or DevSecOps Engineering., • In place of a degree, candidates with 8+ years of hands-on experience working with DevSecOps tooling, methodologies, and processes will be considered., • CI/CD Pipeline Security: Proven track record building, securing, and maintaining Continuous Integration and Continuous Deployment (CI/CD) pipelines with integrated security controls., • CI/CD Platforms: Proficiency with major CI/CD platforms (e.g., Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps)., • Application Security Testing: Direct experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies., • API Security: Demonstrated ability implementing API security solutions and protecting application endpoints., • Container & Artifact Security: Expertise in container security (e.g., Docker, Kubernetes) and managing secure artifact repositories (e.g., JFrog Artifactory, Nexus)., • Cloud Security: Deep background working with public cloud platforms (AWS, Azure, or GCP) and securing cloud infrastructure., • CSPM: Familiarity with Cloud Security Posture Management (CSPM) tools (e.g., Wiz, Prisma Cloud, Orca Security)., • Core Competencies: Strong professional communication, cross-functional collaboration, and team-building skills. Desired Skills • Prior work with Infrastructure as Code (IaC) tools, such as Terraform, CloudFormation, or Ansible., • Ability to write scripts and automation workflows using Python, Bash, or similar programming languages., • Familiarity with automated code scanning, dependency scanning, and secret detection / secret management tools., • Direct exposure to Software Composition Analysis (SCA) tools and open-source vulnerability scanning., • History of supporting and scaling Secure Software Development Lifecycle (SSDLC) initiatives., • Practical knowledge supporting IT compliance and cloud governance frameworks, including NIST, CIS Benchmarks, or SOC 2., • Collaborative background interfacing with Vulnerability Management infrastructure or Penetration Testing teams.

This is an incredible opportunity to leverage your embedded software expertise, collaborate with some of the brightest minds in the industry, and work with the latest aerospace innovations. TTM Technologies - Aerospace and Defense Sector is seeking a Senior DevSecOps Software Engineer to support our

The Senior DevSecOps Software Engineer is responsible for the following areas:Design, implement, and maintain CI/CD pipelines to automate the build, test, and deployment processes for embedded systemsIntegrate DevSecOps tools to automate security checks and vulnerability assessments within the CI/CD

Application Security Testing: Direct experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies. Implement security best practices for cloud-native architectures, including infrastructure-as-code security validation. This role will focus

KPMG is currently seeking a Senior Associate, Application Security, DevSecOps to join our Enterprise Security Services organization. Minimum four years of recent experience in application security, DevSecOps practices, or secure software engineering, including a solid understanding of DevOps concept

Role:- DevSecops Security Engineer with Python Location:- New York, NY (Hybrid 3 days onsite, 2 days remote)Job Description:What Candidates Will Do:Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA

Product Testers are wanted to work from home nationwide in the US to fulfill upcoming contracts with national and international companies.We guarantee 15-25 hours per week with an hourly pay of between $25 / hr.There is no payment required in order to apply or to work as an In-Home Usage Tester.You

Higharc is a VC-backed startup that is changing how new homes are designed and built.Join a founding team who've shipped products for Autodesk, Electronic Arts, Nike, and Apple.We have raised over $175M with support from top-notch venture capital firms and more than 18 strategic investors: industry

GPU Programming Software Engineer.In this role, you will apply your expertise as a GPU programmer to design GPU related tasks to train LLMs, focusing on performance and architecture.Design, implement, and optimize GPU-based software solutions using CUDA, WebGPU or GLSL.Profile and fine-tune GPU kern

Lead Software Engineer (Backend Platform & APIs).A client of mine is seeking a Lead Software Engineer to provide senior technical leadership for a team responsible for core backend services and APIs that power a large scale SaaS platform.This is a senior individual contributor role focused on archit

Black Osprey is a boutique engineering firm that partners with private equity, startups, and Fortune 500 companies to solve complex technical challenges.The team focuses on building high-quality, scalable software solutions tailored to diverse business needs and environments.Working with clients acr

The Project Manager, Software Solutions is responsible for the coordination and delivery of one or more software projects for the software development group within the Imaging Division.The role relies on a blend of traditional project management practices with an Agile development approach for proje

Position: Embedded Hardware/Software Engineer.Company: NAPCO Security Technologies, Inc.Company: NAPCO Security Technologies, a world-wide leader in the manufacturing of electronic security systems for over 50 years, headquartered in Amityville, Long Island NY, seeks an Embedded Hardware/Software En

Position: Senior Software Engineer- Full Stack/Backend/Cloud.Company: NAPCO Security Technologies, Inc.NAPCO Security Technologies, Inc.Amityville, Long Island NY, is a world-wide leader in the manufacturing of electronic security systems for over 50 years has an opening for a Senior Software Engine

Our client has immediate job opportunities for Software Quality Assurance Engineers to join their team in Rochester, NY testing software solutions to support their revolutionary Photofinishing Products.Qualified candidates for this job opportunity will work closely with development Peers, Team Produ

This position supports IT Infrastructure platforms and technologies hosted on-premises and in AWS Virtual Private Cloud.This role is responsible for Cloud Engineering and will provide technical cloud engineering subject matter expertise for multiple technology projects in support of the hosted cloud

Call Center / Remote] - Anywhere in U.Competitive Hourly Pay / Medical-Dental-Vision-Life-Disability / HSA-FSA / 401(k) Plan / Flexible PTO / Parental Leave - As a Customer Service Rep at Verisma, you will: Field client inquiries regarding release of information (ROI) requests for patient medical re

Call Center / Remote] - Anywhere in U.Competitive Hourly Pay / Health-Dental-Vision-Disability-AD&D-Pet / HSA + FSA / 401(k) matching / Paid time off / Wellness program / Employee assistance program - As a Customer Service Representative at Mercola, you will: Respond promptly and professionally to c

Customer Support / Remote] - Anywhere in U.Competitive Hourly Pay / Health-Dental-Vision / Paid time off and company holidays / Opportunities for career growth - As a Customer Service Representative at Direct Meds, you will: Handle inbound customer inquiries with professionalism and efficiency; Reso

PrideStaff - - Responsibilities: Handle high-volume inbound calls in a fast-paced call center; Assist customers with inquiries regarding policy details, coverage, claim status, and general account information; Enter/update client details in internal database; De-escalate customer concerns and resol