OVERVIEWThe DevSecOps - Automations Engineer is a hands-on engineering role within the Information Security Office responsible for integrating security into software development, deployment processes, and automation workflows across the bank. This role works in close partnership with Information Technology and Software Development teams to embed security controls and practices throughout the software development lifecycle (SDLC), supporting secure-by-design principles while enabling efficient delivery.
The engineer focuses on building and enhancing automation, tooling, and pipeline integrations that incorporate security into development and operational processes, while ensuring alignment with regulatory requirements and the Bank's Operational Risk Management (ORM) program. This position operates at the intersection of security, engineering, and operations-guiding and enabling teams to adopt scalable, automated, and compliant security practices without impeding delivery.
ESSENTIAL FUNCTIONS- Design, implement, and enhance DevSecOps practices that embed security into development, build, and deployment workflows.
- Collaborate with Software Development and IT teams to integrate security controls and validation into CI/CD pipelines and automation processes.
- Develop and maintain automation solutions that reduce manual effort and improve consistency of security controls across systems and applications.
- Support 'shift-left' security practices by incorporating security checks, code scanning, and policy enforcement early in the SDLC.
- Build, enhance, and integrate tools, scripts, and workflows that enable teams to adopt secure coding and deployment practices.
- Partner with development teams to review architecture, design, and code for security considerations and provide guidance on remediation strategies.
- Implement and support Infrastructure-as-Code (IaC) and cloud security practices aligned with secure configuration standards.
- Perform and support vulnerability assessments, code scanning, and remediation tracking in coordination with development and infrastructure teams.
- Translate security findings into actionable guidance for both technical and non-technical stakeholders.
- Develop and maintain metrics, reporting, and Key Risk Indicators (KRIs) that measure effectiveness of automation and security integration.
- Ensure alignment with regulatory requirements and frameworks (FFIEC, NIST, PCI).
- Support the Bank's Operational Risk Management (ORM) program, including risk assessments and control validation.
- Participate in incident response and vulnerability remediation efforts.
- Participates in special projects or duties as assigned.
- Performs compliance and risk management duties as required or assigned.
- Regular, reliable attendance is required.
KNOWLEDGE/SKILLS/EXPERIENCE- 3-5 years of experience in software development, DevOps, or security engineering.
- Experience integrating security into development workflows and CI/CD pipelines.
- Proficiency in scripting or development languages such as Python, PowerShell, TypeScript, or JavaScript.
- Experience with Infrastructure as Code (IaC) such as Pulumi.
- Understanding of secure software development practices and SDLC.
- Experience with vulnerability management and application security testing.
- Familiarity with cloud security principles, particularly in Microsoft Azure.
- Knowledge of security frameworks and regulatory expectations (FFIEC, NIST, PCI).
- Experience supporting Operational Risk Management (ORM) programs preferred.
- Strong collaboration and communication skills across development, IT, and security teams.
- Tools/Technology Stack:
- Programming / Scripting: Python, PowerShell, TypeScript, JavaScript
- Automation & Orchestration
- Source Control / Pipelines
- Infrastructure as Code
- Cloud: Microsoft Azure, Google GCP
- Security Tooling: Code scanning and vulnerability assessment tools
- Strong detail orientation with high level of organizational skills and ability to multi-task, managing interruptions with multiple projects.
- Demonstrated self-motivation and initiative; ability to work well both independently and with others.
- Ability to prioritize assignments and handle multiple priorities while maintaining a high level of service to clients in a deadline driven environment under the direction of management.
- Excellent interpersonal skills; ability to collaborate with and work effectively with diverse groups of people, managing conflict and negotiating for results when needed.
- Strong verbal and written communication skills, including ability to communicate and collaborate effectively with technical and non-technical people.
- Preferred experience working in the financial services industry.
- Ability to work additional hours as required by operational and production work loads.
Compensation: $99,830 - $149,745
The compensation range represents the low and high end of the base compensation range for this position located in Spokane, WA. Actual compensation will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. This position is eligible to participate in an applicable incentive plan.
