DevSecOps Engineer

As a DevSecOps Engineer and play a pivotal role in advancing our secure, efficient, and innovative software delivery pipelines. This position offers an exciting opportunity to work at the intersection of development, security, and operations, empowering you to shape our cloud infrastructure and application security posture.

Key Responsibilities:

• Design and implement secure CI/CD pipelines with automated security checks, integrating SAST, DAST, and SCA tools to ensure early vulnerability detection.
• Collaborate closely with development teams to enforce secure coding standards and conduct static and dynamic application security testing within workflows.
• Automate compliance validation and security testing processes using advanced scripting and automation tools such as Python, Terraform, Ansible, and CloudFormation.
• Manage and optimize cloud environments on AWS, Azure, or GCP, ensuring scalable, resilient infrastructure using Infrastructure as Code (IaC).
• Secure container workloads with Docker and Kubernetes, including implementing network policies and security configurations.
• Oversee the deployment and management of microservices architectures, RESTful APIs, and databases such as MySQL, PostgreSQL, Oracle, and SQL Server.
• Monitor systems using tools like Jenkins, Git, and SIEM solutions, swiftly responding to security incidents and vulnerabilities.
• Stay ahead of industry standards and regulatory requirements (ISO 27001, NIST, GDPR, HIPAA, PCI DSS), ensuring organizational compliance.
• Provide training and mentorship on DevSecOps best practices, fostering a security-first culture across teams.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent professional experience.
• At least 4+ years of experience in DevOps, Cloud Security, or Security Engineering, with strong hands-on skills in AWS, Azure, and GCP.
• Proven expertise with CI/CD tools such as Jenkins, GitLab CI/CD, Azure DevOps, and GitHub Actions.
• Proficiency in scripting languages like Python and Java for automation and security tasks.
• Experience with containerization (Docker), orchestration (Kubernetes), and Infrastructure as Code (Terraform, Ansible, CloudFormation).
• Strong understanding of cloud security services, network security, and vulnerability management.
• Ability to obtain a security clearance is preferred.
• Relevant certifications such as CKAD, CKA, AWS Solutions Architect/DevOps Engineer, Security+, or other security engineering credentials are a plus.