# Principal Engineer, DevSecOps

Hiring organization: [Allegiant](https://career.thegoodapps.co/organizations/allegiant)

Canonical page: https://career.thegoodapps.co/jobs/61a17dde-5550-4b6e-b065-66b5321e234f

Listed on Allegiant's own careers site. Applications go to them directly.

- Seniority: Principal
- Location: Las Vegas, NV
- Salary: 153000 – 194600 USD per year

## Summary

Lead a team of engineers building and maintaining security tooling across CI/CD pipelines, cloud infrastructure, and infrastructure-as-code for a major airline modernizing its application portfolio. This role suits experienced security engineers who have shipped production systems that development teams actually use, with demonstrated expertise spanning application security, pipeline engineering, cloud platforms, and IaC governance.

_Our summary, not Allegiant's wording._

## Skills named

Amazon Virtual Private Cloud (VPC), Amazon Web Services (AWS), GitHub Actions, Jira, Terraform

## Required

- 8+ years in information security
- 8+ years implementing network security platforms and strategies
- Production experience building and maintaining security scanning in CI/CD pipelines with GitHub Actions
- Hands-on administration of GitHub Advanced Security or equivalent for organizations with 50+ repositories
- Written and enforced custom Checkov policies or equivalent against Terraform codebases
- Deep working knowledge of AWS security constructs including Control Tower, IAM, VPC, and Transit Gateway
- Experience operating a CNAPP platform such as Palo Alto Cortex Cloud, Prisma Cloud, Wiz, or Orca
- Demonstrated delivery of security tooling adopted by development teams in production
- Lead or mentor experience with 2+ engineers
- Communication and mentorship ability to coach junior and mid-level engineers

## Nice to have

- Production experience across all four domains: application security, pipeline engineering, cloud infrastructure security, and IaC governance
- Administered GitHub Advanced Security with active developer adoption metrics
- Authored Checkov policies that enforced specific compliance or security outcomes in production
- Operated a CNAPP platform including onboarding, policy configuration, and integration with engineering workflows
- Integrated security scan outputs into a SIEM and SOAR platform
- Experience with Cloud Custodian or similar cloud governance automation
- Gathered compliance evidence from automated tooling for PCI-DSS, NIST, or CIS audits
- Hands-on experience securing agentic AI systems with public artifacts demonstrating this work
- References or artifacts from security tooling adopted by development teams

Apply on Allegiant's site: https://jobs.lever.co/allegiantair/288b8451-0f07-4862-93c8-1dd427f89123/apply