Security Engineer (DevSecOps)

Company Description Upscend is an AI-powered learning management system (LMS) built to ensure that learners truly master the material, not just complete courses. The platform uses intelligent automation and data-driven insights to personalize learning paths and measure real skill acquisition. Upscend focuses on practical outcomes, helping organizations upskill their teams efficiently and reliably. As a growing technology company, Upscend offers opportunities to work with advanced AI solutions and modern cloud-based architectures. Team members contribute directly to a product that aims to transform how people learn and retain knowledge.
Role Description The Security Engineer (DevSecOps) role is a full-time remote position responsible for integrating security practices into Upscend’s software development and operations lifecycle. In this role, the individual will design, implement, and maintain security controls across infrastructure, applications, and CI/CD pipelines. Day-to-day tasks include performing threat modeling, conducting security assessments, reviewing code and configurations for vulnerabilities, and collaborating with engineering teams to remediate findings. The Security Engineer will also monitor security alerts, manage incident response procedures, and support compliance initiatives and best practices. This role works closely with developers, operations, and product teams to ensure security is embedded into every stage of the delivery process.
Qualifications
Strong skills in Security Engineering and Information Security, with the ability to design and implement secure architectures and policies.
Proficiency in Application Security, including secure coding practices, code review, and vulnerability assessment of web and cloud applications.
Experience with Network Security, such as configuring firewalls, VPNs, and network segmentation, and monitoring network traffic for threats.
Broad understanding of Cybersecurity principles, including threat modeling, risk assessment, and incident response.
Familiarity with DevSecOps practices, CI/CD tools, and automation for security scanning and compliance (e.g., SAST, DAST, container security).
Hands-on experience with cloud platforms (e.g., AWS, Azure, or GCP) and securing cloud-native environments.
Knowledge of security standards and frameworks (e.g., OWASP, NIST, ISO 27001) and experience applying them in practice.
Strong analytical and communication skills, with the ability to collaborate effectively across cross-functional teams in a remote setting.
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Relevant security certifications (e.g., CISSP, CISM, OSCP, or GIAC) are a plus.

Work arrangement
Yes