DevSecOps Engineer

The DevSecOps Engineer secures the platform that hardware engineering teams trust to ship every day. You'll own the security engineering layer of Duro's modern stack—cloud security posture, detection and threat hunting, security telemetry, and the security infrastructure that protects multi-tenant, dedicated, and regulated (GovCloud/ITAR) environments. This is a security-first role on a small, fast-moving team reporting into the CISO organization, where you'll partner closely with platform engineering, product, and compliance to make security an accelerator rather than a gate. We're looking for an engineer who thinks in adversaries and systems, automates relentlessly, and leverages modern AI-augmented workflows to build defenses that scale. This is a hybrid role based in Los Angeles, CA (3 days per week in office). A day in the life of our DevSecOps Engineer: Cloud Security Engineering: Design and operate the security posture of Duro's AWS commercial and GovCloud environments—IAM and least-privilege access models, KMS/encryption policy, VPC segmentation, network controls, and secure-by-default guardrails across accounts and tenants. Threat Detection & Hunting: Proactively hunt across cloud, application, and identity telemetry for anomalous and adversarial behavior. Build and tune detections as code, reduce false positives, and turn hunt findings into durable, automated coverage. Threat Intelligence: Operationalize threat intelligence—integrate feeds, contextualize indicators and TTPs against Duro's attack surface, and drive proactive hardening ahead of emerging threats. Logging, Monitoring & Reporting: Architect and administer centralized logging, SIEM, and security monitoring across the stack. Own alerting pipelines, dashboards, and the security metrics and reporting that inform leadership, customers, and compliance evidence. Security Infrastructure Implementation & Administration: Implement, administer, and continuously improve the security tooling estate—CSPM, vu