{"id":2573872,"url":"https://alion.io/job/williams-sonoma-information-security-engineer-devsecops","title":"Information Security Engineer - DevSecOps","company":{"id":1885338,"name":"Williams-Sonoma","domain":"williams-sonomainc.com","url":"https://alion.io/company/williams-sonomainc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":75,"open_postings":122,"ghost_share":0,"stale_share":0.992,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rocklin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":110000,"currency":"USD","period":"year","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Delinea","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"Google SecOps","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"MISP","optional":false},{"name":"Ping Identity","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Tanium","optional":false},{"name":"Terraform","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-14T22:52:30Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-16T02:14:33Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About the Team\nYou will be part of the Enterprise Cyber Security organization responsible for protecting Williams-Sonoma, Inc. through reliable, scalable security platforms and automation. The Security DevSecOps function partners with Security Operations, Incident Response, Threat Intelligence, Security Engineering, Identity & Access Management, and Infrastructure to build software and integrations that improve the effectiveness of enterprise security operations.\nThe team’s mission is to reduce repetitive manual work, strengthen response capabilities, and deliver secure, maintainable software and automation that support our associates, customers, and business.\nAbout the Role\nAs an Information Security Engineer - DevSecOps, you will design, develop, deploy, and support SOAR playbooks, workflow automations, platform integrations, and custom applications used by the Enterprise Cyber Security team. This is a hands-on engineering role with end-to-end responsibility for solution design, coding, testing, deployment, documentation, and production support. You will balance SOAR development, security automation, and custom software development while working closely with operational teams to translate security requirements into dependable technical solutions.\nResponsibilities\nDesign, develop, test, deploy, and maintain SOAR playbooks and response workflows in Google SecOps SOAR and Palo Alto Cortex XSOAR.\n\nBuild custom security applications, reusable services, scripts, and workflow automations that improve investigation, enrichment, triage, and response processes.\n\nDevelop and maintain secure integrations using REST APIs, JSON, webhooks, and platform SDKs across Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, MISP, and other enterprise systems.\n\nOwn the full software development lifecycle, including requirements analysis, solution design, source control, testing, release management, documentation, and ongoing production maintenance.\n\nApply Python and PowerShell to automate repeatable security operations tasks; use Git and CI/CD practices to manage versioning, code review, and controlled releases.\n\nUse Docker and container-based development practices, and Terraform or other infrastructure-as-code approaches where appropriate for repeatable deployments.\n\nPartner with SOC, Incident Response, Threat Intelligence, Security Engineering, IAM, and Infrastructure teams to identify automation opportunities and translate operational needs into technical requirements.\n\nTroubleshoot failed playbooks, API integrations, custom applications, and production workflows; conduct root-cause analysis and implement durable fixes.\n\nBuild appropriate safeguards into automations, including least-privilege access, credential protection, audit logging, error handling, testing, approval gates, and rollback procedures for disruptive actions.\n\nParticipate in an on-call rotation supporting production SOAR automations, integrations, and custom security applications.\n\nEvaluate AI-assisted development and agentic automation opportunities, applying human review, security controls, and validation before production adoption.\n\nMaintain clear technical documentation, runbooks, and knowledge transfer materials to support reliable operations and cross-team collaboration.\n\nCriteria\n3+ years of experience in information security engineering, software development, DevSecOps, security automation, or a related technical discipline.\n\nBachelor's degree in Computer Science or related field, or equivalent work experience.\n\nHands-on software development and scripting experience using Python and PowerShell, with working knowledge of REST APIs and JSON.\n\nExperience building, testing, and maintaining automation workflows, platform integrations, or custom applications in production environments.\n\nWorking knowledge of SIEM, SOAR, endpoint security, identity, and threat intelligence concepts and operational workflows.\n\nExperience with Git-based source control, CI/CD practices, software testing, and secure development principles.\n\nFamiliarity with Docker or containers and infrastructure-as-code tools such as Terraform.\n\nStrong analytical, troubleshooting, documentation, and communication skills; ability to work effectively across security and infrastructure teams.\n\nWillingness to participate in an on-call rotation for supported production services.\n\nExperience developing playbooks and integrations in Google SecOps SOAR or Palo Alto Cortex XSOAR preferred.\n\nHands-on experience integrating Google SecOps SIEM, CrowdStrike, Tanium, Ping Identity, Delinea, or MISP preferred.\n\nExperience designing reusable automation frameworks, custom APIs, or internal security applications preferred.\n\nFamiliarity with incident response processes, detection engineering, and threat intelligence enrichment workflows preferred.\n\nExperience with AI-assisted software development or agentic AI workflows, including appropriate testing, oversight, and security controls preferred.\n\nExperience supporting hybrid on-premises and cloud infrastructure in a large enterprise environment preferred.\n\nThis role requires being onsite in the Rocklin, CA office Monday through Thursday.\nOur Culture & Values\nWe believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.\nPeople First\nPutting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:\nBenefits\nA generous discount on all WSI brands\n\nA 401(k) plan and other investment opportunities\n\nPaid vacations, holidays, and time off to volunteer\n\nHealth benefits, dental and vision insurance, including same-sex domestic partner benefits\n\nTax-free commuter benefits\n\nA wellness program that supports your physical, financial and emotional health\n\nContinued Learning\nIn-person and online learning opportunities through WSI University\n\nCross-brand and cross-function career opportunities\n\nResources for self-development\n\nAdvisor (Mentor) program\n\nCareer development workshops, learning programs, and speaker series\n\nWSI will not now or in the future commence an immigration case or \"sponsor\" an individual for this position (for example, H-1B or other employment-based immigration).\nThis role is not eligible for relocation assistance.\nWilliams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.\nThe expected starting pay range for this position is $90,000 - $110,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.","description_format":"text","description_chars":7131,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Relocation assistance","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["DevSecOps","Furniture","Home Decor","Kitchenware & Cookware"],"lifecycle":[{"event":"open","at":"2026-10-14T23:33:57Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 22 · green card filings: 7","filings_12m":22,"filings_prev_12m":48,"green_card_filings_12m":7,"median_offered_wage_usd":154914,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":110000,"is_top_pay":false},"html_url":"https://alion.io/job/williams-sonoma-information-security-engineer-devsecops","json_url":"https://alion.io/job/williams-sonoma-information-security-engineer-devsecops.json","meta":{"generated_at":"2026-10-16T04:07:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":765,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1885338},"rest":"https://alion.io/mcp/rest/get_company?id=1885338"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwilliams-sonoma-information-security-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwilliams-sonoma-information-security-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwilliams-sonoma-information-security-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/williams-sonoma-information-security-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwilliams-sonoma-information-security-engineer-devsecops"}]}