Development Security Operations (DevSecOps) Engineer

About the role

Company Information

AEG brings music, sports, and live entertainment together to create moments people remember around the world. Each year, more than 100 million fans experience live events across five continents—from global touring, concerts, and festivals to iconic sports and entertainment destinations.

Through our music division, AEG Presents, one of the world’s leading operators of tours, concerts, and music festivals, we help shape the sound of now. We work with artists at every stage of their careers to bring live music to life, connecting artists with fans on stages around the world.

Headquartered in Los Angeles, AEG Presents is driven by creativity, innovation, and purpose, and powered by people who want their work to show up in the real world.

If you’re ready to help create moments that matter, there’s a place for you here. Because it happens here.

Job Summary

The Development Security Operations (DevSecOps) Engineer is a technical role responsible for implementing and maintaining secure software development practices across the organization. Working closely with development, operations, and security teams, this position helps ensure that software delivery processes and environments align with industry best practices while maintaining operational efficiency and strong security controls. The DevSecOps Engineer supports the integration of security throughout the software development lifecycle, assists in identifying and mitigating security risks, and contributes to the continuous improvement of security automation, monitoring, and compliance capabilities.

Essential Functions

- Implement and maintain secure software development practices across the organization by:

- Performing code reviews and collaborate with development teams to address security vulnerabilities and implement secure coding practices.

- Providing guidance and support to development teams in implementing secure coding practices and integrating security into the development lifecycle.

- Work to provide security efforts with DevOps team to secure infrastructure and ensure secure deployment and operation of applications.

- Work with cross-functional teams to define security requirements, standards, and guidelines for software development projects.

- Enhance and monitor the tools used within the development and operations process. This includes:

- Reviewing and enhancing CI/CD pipelines using Github Actions, Azure DevOps, AWS Code pipeline, and Jenkins.

- Utilizing tools like Orca Security, Sysdig, Codacy and Azure Log Analytics to monitor and analyze system logs and application code for security vulnerabilities.

- Staying up to date with the latest security trends, vulnerabilities, and industry best practices, and ensure their integration into our software development processes.

- Secure Image and Artifact Management: Protect container images, build artifacts, and other software packages used in the CI/CD pipeline. Scan these artifacts for vulnerabilities before deploying them and utilize secure registries for storage and distribution.