Job description
Your Role at a Glance
The DevSecOps Security Engineer is responsible for securing and governing Mastercam's cloud-native application platforms, AI-enabled solutions, and supporting infrastructure. This role integrates security throughout the software development lifecycle, including CI/CD pipelines, Kubernetes environments, identity and access management systems, cloud services, and AI workloads.
Working closely with Software Engineering, Platform Engineering, Infrastructure, and IT Operations teams, the DevSecOps Security Engineer designs, implements, and maintains security controls that protect applications, infrastructure, data, and AI services while supporting the efficient delivery of business solutions. The role helps establish security standards, improve risk management practices, and promote secure-by-design principles across development and operational processes.
This position requires expertise in cloud-native technologies, Kubernetes, container security, CI/CD environments, and modern application security practices, along with the ability to contribute to emerging AI and platform security initiatives. The role serves as a key technical resource in advancing the organization's security posture while enabling innovation and operational scalability.
How You’ll Drive Success
Platform Security
Secure Kubernetes-based platforms and containerized workloads.
Implement and maintain Kubernetes security controls including RBAC, Network Policies, Pod Security Standards, and namespace segmentation.
Perform security reviews of platform architecture and application deployments.
Develop infrastructure hardening standards and security baselines.
DevSecOps
Integrate security controls into CI/CD pipelines.
Implement automated vulnerability scanning, code analysis, and compliance checks.
Establish secure software supply chain processes.
Partner with development teams to remediate vulnerabilities and improve secure coding practices.
Develop and maintain security guardrails within GitOps workflows.
Identity & Access Management
Secure authentication and authorization systems.
Implement least-privilege access controls across applications and infrastructure.
Support identity federation, Single Sign-On (SSO), OAuth2, OpenID Connect, and Multi-Factor Authentication (MFA).
Review systems for access governance and privileged access risks.
Secret Management
Implement secure management of secrets, certificates, encryption keys, and service credentials.
Support automated secret rotation and certificate lifecycle management.
Ensure secure application integration with centralized secrets management platforms.
API & Service Security
Secure API gateways and service-to-service communications.
Review API implementations against OWASP API Security standards.
Implement authentication, authorization, rate limiting, and API threat protection controls.
Support Zero Trust networking initiatives.
Security Monitoring & Detection
Create dashboards and alerts for security events.
Develop security metrics and monitoring capabilities.
Collaborate with operations teams during security investigations and incident response activities.
Analyze platform telemetry and audit logs to identify threats and control gaps.
AI & Emerging Technology Security
Support security reviews for AI and machine learning workloads.
Assist with implementing controls to protect against prompt injection, sensitive data exposure, and model misuse.
Participate in AI governance and risk assessment activities.
Evaluate emerging risks associated with Large Language Models (LLMs), vector databases, and AI platforms.
The Talents We’re Seeking
Education & Experience
Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered.
4 - 5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering.
1+ year of hands-on experience supporting Kubernetes or containerized application environments.
Experience securing cloud-native applications and services.
Experience implementing vulnerability management and application security programs.
Experience working with software development teams and CI/CD pipelines.
Experience supporting cloud environments such as AWS, Azure, or Google Cloud.
Required Skills
Kubernetes
Knowledge of:
Kubernetes architecture
Pods, Deployments, Services, and Ingresses
RBAC
Network Policies
Container security
Workload isolation
Cluster security fundamentals
Containers
Experience with:
Docker
Container image security
Image scanning
Vulnerability remediation
Secure image lifecycle management
DevSecOps
Experience with:
CI/CD pipelines
Source code management platforms
Git workflows
Automation and scripting
Understanding of:
SAST
DAST
Dependency scanning
Secret scanning
Infrastructure-as-Code security
Identity Management
Knowledge of:
OAuth2
OpenID Connect
SAML
MFA
Role-Based Access Control
Security Operations
Experience with:
Vulnerability management
Threat detection
Security monitoring
Incident response support
Risk assessments
Scripting
Ability to automate security processes using:
Python
Bash
PowerShell
Preferred Skills
Experience with any of the following technologies is highly desirable:
Platform Technologies
Kubernetes
Istio
FluxCD
APISIX
OpenTelemetry
Grafana
Identity & Security Technologies
Keycloak
OpenBao
HashiCorp Vault
Azure Entra ID
AWS IAM
Data & Messaging Platforms
PostgreSQL
RabbitMQ
Qdrant
AI Platforms
Amazon Bedrock
Generative AI applications
Retrieval Augmented Generation (RAG)
Vector databases
LLM Security
Preferred Security Knowledge
Knowledge of:
OWASP Top 10
OWASP API Security Top 10
OWASP Top 10 for LLM Applications
NIST Cybersecurity Framework
CIS Benchmarks
Zero Trust Architecture
Secure Software Development Lifecycle (SSDLC)
Preferred Certifications
One or more of:
Security+
Certified Kubernetes Administrator (CKA)
Certified Kubernetes Security Specialist (CKS)
AWS Certified Security Specialty
CISSP
CCSP
GIAC Certifications
Who We Are
At Mastercam, we do not just keep pace with manufacturing—we set the pace. For over 40 years, we have been the name behind the breakthroughs, the partner for those who refuse to settle. When the industry says “too complex,” we say, “challenge accepted.”
We are more than software. We are a movement of makers, innovators, and problem-solvers driving transformation across the globe.
Backed by a network of 400 Channel Partners and a thriving developer community, Mastercam delivers the tools and expertise to turn ambitious ideas into flawless reality. From aerospace to automotive, medical to education, we empower manufacturers to push boundaries and redefine what is possible.
As part of Intelligent Manufacturing and the Sandvik Group, we are leading the charge in digital transformation. Our team of 500+ professionals is united by a single mission: to help achieve precision, productivity, and performance without compromise.
Our Core Values? They are not just words. They are how we win:
Winning Together: Collaboration is not optional—it is the engine that drives us.
Curiosity: We question, we explore, we innovate. Every day.
Responsibility: Safety, integrity, and sustainability aren’t boxes to check—they are the foundation of trust.
Customer-Focused: We listen. We adapt. We deliver. Always.
Innovation. Collaboration. Growth. That is the Mastercam way. Explore more at , connect on LinkedIn, and join the conversation with #mastercam.
The next big challenge is waiting—are you ready to accept?
It is the policy of the company to provide equal employment opportunities to all employees and employment applicants without regard to race, color, religion, sex, or national origin or any other classification protected by applicable local or state laws.
EOE/M/F/Vet/Disabled are encouraged to apply.
We are an E-Verify Employer.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.