---
title: 'Senior DevSecOps Engineer at ALTEN Technology USA'
canonical: 'https://feeny.ai/job/senior-devsecops-engineer-alten-technology-usa-denver-colorado-2r696k1z788s'
type: 'job'
last_seen: '2026-09-06'
---

# Senior DevSecOps Engineer at ALTEN Technology USA

- **Company:** ALTEN Technology USA
- **Location:** Denver Colorado, United States
- **Posted:** 2026-08-14
- **Last confirmed live:** 2026-09-06
- **Apply:** https://job-boards.greenhouse.io/altentechnologyusa/jobs/5212703007

## Job description

We’re ALTEN Technology USA, an engineering company helping clients bring groundbreaking ideas to life—from advancing space exploration and life-saving medical devices to building autonomous electric vehicles. With 3,000+ experts across North America, we partner with leading companies in aerospace, medical devices, robotics, automotive, commercial vehicles, EVs, rail, and more.

As part of the global ALTEN Group—57,000+ engineers in 30 countries—we deliver across the entire product development cycle, from consulting to full project outsourcing.

When you join ALTEN Technology USA, you’ll collaborate on some of the world’s toughest engineering challenges, supported by mentorship, career growth opportunities, and comprehensive benefits. We take pride in fostering a culture where employees feel valued, supported, and inspired to grow.

As a Sr DevSecOps Engineer you will be responsible for;

- Define and own the DevSecOps architecture and roadmap for embedded capital equipment platforms, including CI/CD pipelines, build infrastructure, security automation, release evidence, and long-term maintainability.
- Develop and maintain secure embedded platform software, build infrastructure, and reusable automation capabilities.
- Create and support Yocto-based embedded Linux distributions, BSP software, device drivers, hypervisors, and platform-level OS components.
- Establish secure software supply chain practices, including SBOM generation, SOUP/OTS component tracking, license awareness, vulnerability monitoring, end-of-support tracking, and remediation workflows.
- Develop reusable CI/CD templates and pipeline controls for static analysis, software composition analysis, unit test automation, artifact signing, provenance tracking, cybersecurity evidence capture, and release readiness.
- Lead threat modeling and cybersecurity risk analysis for embedded platform components, including asset identification, attack surface analysis, exploitability assessment, security controls, and traceability to risk mitigations.
- Drive CVE intake, enrichment, asset mapping, triage, risk scoring, remediation planning, validation, and reporting in partnership with Product Security, SWQA, Systems, and program teams.
- Design and implement secure boot, firmware signing, cryptographic configuration, key/certificate lifecycle support, authenticated update mechanisms, and secure device communication patterns.
- Define runtime security monitoring requirements and support post-market cybersecurity monitoring and vulnerability response workflows.
- Review reported anomalies, assess cybersecurity impact, and support incident-response activities as needed.
- Support regulatory submissions and audits by ensuring cybersecurity, software lifecycle, and DevSecOps evidence is complete, traceable, reproducible, and aligned with internal quality system expectations.
- Define platform-level OS and BSP maintenance strategies, including Linux kernel support, Yocto release planning, driver update strategy, patchability, and security update governance across the product lifecycle.
- Collaborate with external vendors and internal partners to evaluate security tooling, embedded Linux support models, vulnerability intelligence, penetration testing outputs, and long-term maintenance approaches.
- Provide technical leadership and mentoring to software engineers, DevOps engineers, and platform teams on secure coding, build automation, vulnerability handling, and regulated software development practices.
- Partner with product teams to define platform capabilities that are reusable, secure, testable, and scalable across multiple capital equipment programs.
- Technologies & Tools
- AMD Zynq and Zynq UltraScale+ SoCs, NVIDIA ORIN, SafeRTOS, FreeRTOS
- Yocto-based embedded Linux package development
- Embedded hypervisors, Linux device drivers, BSPs, and boot flows
- Custom build systems and CI/CD pipelines
- Docker, Snyk, SonarQube, and software composition analysis tools
- Static analysis, software composition analysis, artifact signing, and vulnerability management tools
- Python, Bash, and Go
- Atlassian tools including Bitbucket, Jira, Bamboo, and Confluence
- GitHub and GitLab
- Networking security, secure boot, firmware signing, and secure update technologies

## Qualifications;

- Strong experience in embedded Linux platform development for regulated, safety-critical, or high-reliability products.
- Hands-on experience with AMD/Xilinx SoC-based embedded systems, including AMD Zynq 7000 series, Zynq UltraScale+, Kria SOM, and the NVIDIA ORIN platform. Experience with real-time operating systems such as SafeRTOS and QNX Neutrino.
- Experience with Yocto, BSPs, OS layers, kernel configuration, boot flows, device drivers, and embedded platform security.
- Experience developing or governing DevSecOps practices in regulated medical device, safety-critical, aerospace, automotive, or industrial control environments.
- Strong understanding of FDA cybersecurity expectations, IEC 62304, ISO 14971, ISO 13485, SOUP/OTS software management, SBOM practices, and software lifecycle evidence generation.
- Experience implementing security automation in CI/CD pipelines, including SAST, SCA, container scanning, artifact signing, build reproducibility, traceability, and vulnerability reporting.
- Strong experience with threat modeling, vulnerability assessment, cybersecurity risk analysis, and secure-by-design architecture reviews.
- Experience with CVE triage methods that include exploitability, asset exposure, configuration applicability, runtime reachability, known exploited vulnerabilities, and remediation validation.
- Ability to collaborate across hardware, software, systems, product security, quality, regulatory, program management, and product management stakeholders.
- Demonstrated ability to influence cross-functional engineering and leadership decisions without direct authority.
- Experience defining reusable platform practices across multiple products, programs, hardware variants, or software release branches.
- Strong debugging, problem-solving, and root-cause analysis skills.
- Strong technical communication skills with the ability to translate cybersecurity and DevSecOps risks into actionable engineering and leadership decisions.

Salary Range: $125k-$150k

The actual salary offered is dependent on various factors including, but not limited to, location, the candidate’s combination of job-related knowledge, qualifications, skills, education, training, and experience

MANDATORY FOR ALL REMOTE/HYBRID AND/OR CALIFORNIA, DISTRICT OF COLUMBIA, HAWAII, COLORADO, MARYLAND, CONNECTICUT, ILLINOIS, MINNESOTA, VERMONT, MASSACHUSETTS, NEVADA, NEW YORK, RHODE ISLAND, WASHINGTON STATE & CINCINNATI, OHIO, JERSEY CITY, NEW JERSEY, TOLEDO, OHIO BASED ROLES.

Note: Due to the nature of the work, only US Persons (citizens or permanent residents) need apply for this position. - OPTIONAL All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or pregnancy.

Please beware of job seeker scams and see this [important notice](https://www.alten.com/careers/job-offers/) on our careers page for more information about our recruiting process.

Compliance Notice: Alten USA is a federal contractor subject to the requirements of the Vietnam Era Veterans’ Readjustment Assistance Act (VEVRAA) and Executive Order 11246. We are an Equal Opportunity Employer and consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Drug Screening Requirement: As a federal contractor, Alten USA maintains a drug-free workplace. All candidates selected for employment will be required to successfully complete a pre-employment drug screening as a condition of hire.

## About ALTEN Technology USA

## Company Overview
- **One-liner**: ALTEN Technology USA is a premier engineering and technology consulting firm that partners with clients to design, build, and scale solutions across aerospace, automotive, life sciences, energy, and telecommunications.
- **Entity Type**: Public (part of ALTEN Group, Euronext Paris: ALTE)
- **Headquarters**: Greensboro, North Carolina, United States
- **Founded**: 1988
- **Founders**: Not publicly available (ALTEN Group was founded by Laurent Schwartz in 1988)

## Core Business
- **Primary industries**: Aerospace & Defense, Automotive (including EV), Life Sciences & Medical Devices, Energy & Environment, Rail, Telecommunications, Unmanned Systems & Robotics
- **Target customers**: Enterprise (B2B) — large OEMs, Tier 1 suppliers, and government contractors
- **Mission/purpose**: To deliver product development and engineering solutions for the world’s most advanced industries, with a commitment to sustainable innovation and ESG principles

## Products & Services
ALTEN Technology USA offers end-to-end engineering and IT services covering the entire product lifecycle:
- **Mechanical Engineering**: Design, analysis, and prototyping
- **Embedded Electronics Engineering**: Hardware and firmware development
- **Software Engineering & IT**: Application software, cloud & infrastructure, data management
- **Systems Engineering**: Requirements management, architecture, integration
- **Manufacturing Engineering**: Process optimization, production support
- **Product Development**: From concept through launch
- **Sustaining Engineering**: Lifecycle support and legacy system management
- **Project Management Office (PMO)**: Program oversight and delivery management
- **Cybersecurity**: Security testing and compliance
- **Artificial Intelligence**: AI/ML solution development
- **Software Testing**: QA and validation services
- **Green IT**: Sustainable IT consulting
- **Medical Devices & Diagnostics**: Full development under ISO 13485
- **Aerospace & Defense**: AS9100 and ITAR compliant services
- **Rail**: Engineering for rail systems
- **Pharmaceutical**: Engineering for pharma manufacturing
- **Automotive Engineering**: Including EV and autonomous vehicle development

## Market Standing
- **Valuation/Market Cap**: Not publicly available for the U.S. subsidiary; ALTEN Group (parent) is a publicly traded company on Euronext Paris (ALTE)
- **Key Metric**: Part of the ALTEN Group, which employs **57,400+ employees** globally across **30+ countries** — ALTEN Technology USA employs approximately **600+ people** in the United States
- **Notable Investors/Partners**: ALTEN Group (parent, founded 1988); partners with major clients across aerospace, automotive, and life sciences
- **Growth Signals**: 20+ years serving U.S. clients; presence in 30+ U.S. cities; named a **2023 Top Workplaces USA Award Winner**; LinkedIn follower base grew **+54.1% year-over-year** (103,000 followers); active hiring with 130+ open roles on Greenhouse

## Competitive Advantages
- **Global reach with local expertise**: Access to 57,000+ engineers worldwide combined with localized U.S. delivery centers
- **Broad industry coverage**: Expertise across aerospace, automotive, medtech, energy, rail, and defense — rare breadth in the engineering services space
- **Certifications & compliance**: ISO 9001, ISO 13485, AS9100, ITAR compliant — enabling work on highly regulated projects
- **ESG commitment**: Member of the United Nations Global Compact since 2010; net-zero emissions goal by 2050; 30%+ of R&D dedicated to sustainable innovation
- **End-to-end capability**: Covers the entire product lifecycle from concept to manufacturing to lifecycle support

## Strategic Focus
- **Sustainable innovation**: Investing heavily in green engineering, energy transition, and climate-related projects
- **Digital transformation**: Expanding AI, cloud, and data management capabilities
- **U.S. market growth**: Continuing to expand footprint across U.S. cities and deepen relationships with domestic clients
- **Talent development**: Focus on mentorship, career growth, and international mobility opportunities for engineers

## Why Work Here
- **Culture**: Named a **Top Workplace in the US (2023)**, with strong employee feedback on work-life balance and relationship-building
- **Work model**: Mix of on-site at client facilities and work package execution at delivery centers; scheduling flexibility emphasized
- **Benefits**: Medical, dental, vision insurance; 401(k)-matching program; PTO; paid parental leave
- **Career growth**: Opportunities for mentorship, international mobility across 30+ countries, and exposure to cutting-edge projects in aerospace, medtech, and autonomous vehicles
- **Engineering culture**: Collaborative, solution-oriented environment with interesting technical challenges — projects include space exploration, life-saving medical devices, and autonomous electric taxis
- **Diversity**: 100+ nationalities represented within the global ALTEN Group
- **Important note**: ALTEN Technology has reported employment scams; they do not charge fees to applicants and only extend offers after a formal interview process — beware of unsolicited offers from domains other than alten.com

## Sources
1. [ALTEN Technology USA - About Page](https://altenusa.com/about/)
2. [ALTEN Technology USA - Careers Page](https://altenusa.com/careers/)
3. [ALTEN Technology USA - Job Openings (Greenhouse)](http://job-boards.greenhouse.io/altentechnologyusa)
4. [ALTEN Technology USA - LinkedIn](https://www.linkedin.com/company/altentechnologyusa)
5. [ALTEN USA - Homepage](https://altenusa.com/)
6. [ALTEN Group - Global Careers](https://www.alten.com/why-choose-alten/#technological-challenges)

## Other roles at ALTEN Technology USA

- [Junior Brake/Suspension Engineer](https://feeny.ai/job/junior-brake-suspension-engineer-alten-technology-usa-chelsea-michigan-a9g8x60pp1y7) — Chelsea Michigan, United States
- [Senior Systems Engineer](https://feeny.ai/job/senior-systems-engineer-alten-technology-usa-westminster-co-ezer375sa75d) — Westminster CO, United States
- [Engineering Recruiter](https://feeny.ai/job/engineering-recruiter-alten-technology-usa-irvine-r3t4602srjc6) — Irvine, CA
- [Automotive Cockpit Validation Engineer](https://feeny.ai/job/automotive-cockpit-validation-engineer-alten-technology-usa-auburn-hills-dx577h0zmq71) — Auburn Hills Michigan, United States
- [Mechanical Engineer (Ref. L-2617)](https://feeny.ai/job/mechanical-engineer-ref-l-2617-alten-technology-usa-greensboro-54kpdg7psp5g) — Greensboro, NC
- [Mechanical Engineer - Durability (Ref. L-2618)](https://feeny.ai/job/mechanical-engineer-durability-ref-l-2618-alten-technology-usa-greensboro-6tr8a4jwmryr) — Greensboro, NC
- [Systems Engineer (Ref. L-2619)](https://feeny.ai/job/systems-engineer-ref-l-2619-alten-technology-usa-greensboro-hswa0qhwbbd3) — Greensboro, NC
- [NAPR – Validation Engineer](https://feeny.ai/job/napr-validation-engineer-alten-technology-usa-auburn-hills-michigan-ap20nybcd1n7) — Auburn Hills Michigan, United States
- [Mechanical Engineer II - Structural Analysis](https://feeny.ai/job/mechanical-engineer-ii-structural-analysis-alten-technology-usa-remote-z0q4f7v2vbg3)
- [Senior Project Manager - Manufacturing Expansion & Capital Projects](https://feeny.ai/job/senior-project-manager-manufacturing-expansion-capital-projects-alten-dfc8w5m7vqnp) — Detroit Michigan, United States