{"id":3603574,"url":"https://alion.io/job/kbr-devsecops-engineer-3","title":"DevSecOps Engineer","company":{"id":4344,"name":"KBR","domain":"kbr.com","url":"https://alion.io/company/kbr","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":416,"ghost_share":0,"stale_share":0.988,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Fortify","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Kubernetes","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"ISO 27001","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-02T10:41:10Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-02T21:32:50Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Title:\nDevSecOps EngineerThe DevSecOps Engineer is responsible for integrating security practices into the software development lifecycle to enable secure, scalable, and compliant delivery of applications. This role leverages enterprise DevSecOps platforms-including Azure DevOps, GitHub, SonarQube, Sonatype, Fortify, Katalon, and OpenShift-to embed automated security, code quality, and compliance controls while supporting high-velocity software delivery. The role also supports platform evolution through repository and pipeline migrations and ongoing DevSecOps toolchain modernization.\nKey Responsibilities\nIntegrate security controls and best practices into CI/CD pipelines using Azure DevOps and GitHub Actions\nConfigure and enforce code quality and security gates leveraging SonarQube and Fortify\nImplement Software Composition Analysis (SCA) using Sonatype to detect and remediate open-source vulnerabilities\nEmbed vulnerability detection, secrets scanning, and policy enforcement into development workflows\nCollaborate with development teams to remediate security findings and improve secure coding practices\nEstablish and maintain governance controls and branch protection policies in GitHub and Azure DevOps\nSupport containerization and platform engineering practices using OpenShift, including image scanning and runtime security\nImplement and maintain cloud-native and hybrid security controls across Azure environments\nMonitor, triage, and respond to vulnerabilities identified across SDLC tooling and pipelines\nMigration & Platform Transformation\nPlan and execute migration of source code repositories between platforms (e.g., Azure DevOps to GitHub), ensuring integrity, history preservation, and minimal disruption\nDesign, migrate, and optimize CI/CD pipelines to align with enterprise standards and target platforms\nConsolidate and rationalize DevSecOps toolchains during migrations to improve efficiency and reduce duplication\nTool Lifecycle & Continuous Modernization\nManage lifecycle of DevSecOps tools, including version upgrades, patching, and feature adoption across SonarQube, Sonatype, Fortify, Katalon, GitHub, and Azure DevOps\nEvaluate and implement new capabilities, integrations, and enhancements across the DevSecOps platform stack\nEnsure compatibility, performance, and security posture are maintained during tool upgrades and platform changes\nDevelop reusable pipeline templates, automation scripts, and security standards for enterprise adoption\nEnsure compliance with internal governance, security policies, and regulatory requirements\nDrive continuous improvement of DevSecOps maturity, automation, and toolchain integration\nQualifications:\nBachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience\n5+ years of experience in DevOps, DevSecOps, or software engineering\nHands-on experience with CI/CD platforms including Azure DevOps and GitHub\nExperience with application security and quality tools including SonarQube, Fortify, and Sonatype\nExperience executing repository and CI/CD pipeline migrations across platforms\nExperience implementing automated testing frameworks (Katalon or similar)\nStrong understanding of secure coding practices and common vulnerabilities (OWASP Top 10)\nExperience with container platforms such as OpenShift or Kubernetes\nExperience working in cloud environments, preferably Microsoft Azure\nProficiency in scripting or programming (PowerShell, Python, Bash, or similar)\nPreferred Qualifications\nExperience with GitHub Advanced Security and enterprise governance controls\nExperience leading large-scale DevSecOps platform migrations or transformations\nFamiliarity with policy-as-code tools such as Open Policy Agent or Azure Policy\nSecurity certifications such as CISSP, CSSLP, or CEH\nKnowledge of regulatory and compliance frameworks (NIST, ISO 27001, SOC 2)\n Belong. Connect. Grow. with KBR!","description_format":"text","description_chars":3905,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Military Logistics","Space Services","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-02T10:41:10Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-02T23:09:19Z"},"pay":null,"html_url":"https://alion.io/job/kbr-devsecops-engineer-3","json_url":"https://alion.io/job/kbr-devsecops-engineer-3.json","meta":{"generated_at":"2026-11-02T23:09:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32556,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4344},"rest":"https://alion.io/mcp/rest/get_company?id=4344"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkbr-devsecops-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkbr-devsecops-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkbr-devsecops-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kbr-devsecops-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkbr-devsecops-engineer-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3603574}},{"tool":"search_jobs","arguments":{"company":"kbr.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3603574},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}