DevSecOps Engineer

IT Security/DevSecOps Engineer III (Contract) — San Diego, CA Overview We are seeking a Senior IT Security Engineer (Level III) to support a high-impact, short-term initiative focused on security operations, threat analysis, and adversary disruption (takedowns). This role sits within a threat intelligence/security team and is heavily focused on analyzing security data, identifying threats, and executing takedown operations in partnership with third-party vendors. Due to the urgent timeline and limited ramp-up period, this position requires a hands-on, highly technical engineer who can contribute immediately with minimal onboarding. Key Responsibilities 1. Security Operations & Takedown Program (Primary Focus) • Review and triage incoming security threats and flagged items • Determine: • Valid threats requiring takedown action • False positives • Partner with third-party vendors to execute takedown requests • Help reduce backlog and improve operational efficiency • Collaborate across internal teams to support adversary disruption efforts 1. Data Analysis & Threat Identification (SQL-Heavy) • Write and execute complex SQL queries to analyze security data • Identify: • Threat patterns • Trends and anomalies • Potential adversary behavior • Use data insights to drive decision-making on takedowns and threat mitigation 1. Incident Response & Security Investigation • Investigate security incidents and suspicious activity • Perform log analysis and forensic review • Track and analyze threats across systems and platforms • Support detection and response efforts within a production environment 1. Automation & Process Improvement • Assist in building and improving automation workflows • Support scalability of the takedown and threat analysis processes • Work within DevOps-oriented environments to enhance efficiency Required Qualifications (Non-Negotiable) SQL Expertise (Critical Requirement) • Must have strong, hands-on SQL skills • Ability to: • Write queries from scratch • Analyze and manipulate large datasets • Explain query logic clearly • Candidates without real SQL proficiency will not be considered Security Background • Experience in: • Security engineering, security operations, or threat intelligence • Understanding of: • Security tools (SIEM, IDS/IPS, firewalls) • Threat intelligence concepts and vendors • Ability to apply security knowledge in real-world scenarios Location Requirement • Must be based in San Diego, CA • Required to work onsite 3 days per week (no exceptions) Preferred / Differentiating Experience • Experience with adversary disruption or takedown operations • Working with vendors or teams to remove malicious content/infrastructure • Background in: • Threat intelligence workflows • Security automation • Familiarity with: • DevOps environments • Scripting (e.g., Python) • AI/advanced tooling (nice-to-have) Ideal Candidate Profile The ideal candidate: • Is highly proficient in SQL and comfortable working directly with data • Has hands-on experience in security operations or incident response • Can quickly analyze threats and make decisions with minimal guidance • Has worked in production environments with real-time security challenges • Is comfortable working in a fast-paced, ambiguous, and short-term engagement • Brings a proactive, investigative mindset to identifying and mitigating risks Contract Details • Location: San Diego, CA (Hybrid – 3 days onsite) • Pay Rate: $99.50/hr • Duration: Short-term contract (estimated ~2–3 months remaining) • End Date: Targeted for July 31 (aligned to fiscal year-end) • Extension/Conversion: Not guaranteed, but not out of realm of possibilities Why This Role • Opportunity to work in a rapidly growing area of security (adversary disruption & takedowns) • Gain hands-on experience with real-world threat mitigation • Collaborate with third-party security vendors and internal teams • Exposure to unique, high-impact security challenges not typically found in standard roles • Strong opportunity to expand skillset quickly in a short timeframe Key Takeaways • SQL + San Diego presence = mandatory • Security experience = essential • Immediate impact required (minimal ramp-up) • Takedown/adversary disruption = major plus • Role is urgent, execution-focused, and highly hands-on