Join a mature DevOps team to enhance the stability, security, and scalability of CI/CD pipelines across hybrid environments. This role focuses on DevSecOps and AI-assisted security, leveraging advanced static application security testing (SAST), software composition analysis (SCA), and emerging AI-powered security capabilities to streamline software delivery, improve developer productivity, and strengthen application security throughout the SDLC. The engineer will partner closely with application teams to implement secure delivery practices, remediate vulnerabilities, automate security controls, and leverage AI-powered tools to accelerate security analysis, vulnerability remediation, and code fixes.
Responsibilities
Perform advanced application security analysis using AI-assisted security tools, SAST, SCA, dependency analysis, and software supply chain security solutions.
Partner with application teams to implement secure software delivery practices and embed security throughout the SDLC.
Develop and automate security controls, policies, quality gates, and remediation workflows within CI/CD pipelines to enable secure and compliant software delivery.
Leverage AI-powered tools and coding assistants to identify vulnerabilities, generate remediation recommendations, and accelerate code remediation efforts.
Analyze and prioritize security findings, working with development teams to reduce risk and improve application security posture.
Evaluate and implement emerging AI-driven security capabilities and automation solutions to strengthen enterprise security and improve developer productivity.
Qualifications
10+ years of experience in DevOps, DevSecOps, Application Security, Secure Software Engineering, or a related field.
Expert knowledge of application security, vulnerability management, security assessments, and software supply chain security, including SAST, SCA, DAST, dependency analysis, and secure coding practices.
Hands-on experience leveraging AI technologies, including LLMs, MCP servers, AI Skills, AI Agents, and code assistants such as Claude Code, GitHub Copilot, Codex, Antigravity, or similar platforms for security analysis, vulnerability remediation, and developer productivity.
Experience with security tools such as SonarQube, Sonatype Nexus IQ, GitHub Advanced Security, HCL AppScan, Prisma, Qualys, or similar application security platforms.
Experience developing and implementing secure CI/CD pipelines and automation using GitHub, GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build, or similar technologies.
Strong understanding of SDLC, DevSecOps principles, security controls, and modern application security best practices.
Experience partnering with application development teams to remediate vulnerabilities, implement security controls, and improve overall security posture.'
The base compensation range for this role in the posted location is: $125000/Yr - $140000/Yr
Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini's discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.
