Job Summary :
We are seeking a highly skilled DevSecOps Engineer to join our team and help integrate security at every phase of the software development lifecycle. The ideal candidate will have a strong background in DevOps, cloud infrastructure, and cybersecurity, with a focus on automation, continuous integration / continuous delivery (CI / CD), and secure coding practices.
Key Responsibilities :
- Implement and maintain security tools and practices within CI / CD pipelines.
- Automate security scanning (SAST, DAST, SCA, container security, etc.) and integrate them into build and deployment processes.
- Collaborate with development, operations, and security teams to ensure secure code deployment.
- Conduct threat modeling, risk assessments, and vulnerability management.
- Manage secrets and credentials securely using tools like HashiCorp Vault, AWS Secrets Manager, etc.
- Monitor and respond to security incidents and alerts.
- Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC2, GDPR, NIST).
- Define and enforce policies related to secure code development and infrastructure security.
- Maintain infrastructure as code (IaC) using Terraform, CloudFormation, etc., with security best practices.
- Educate developers and operations teams on secure coding and cloud security practices.
Required Skills & Qualifications :
Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience).5+ years of experience in DevOps, cloud security, or a related role.Strong knowledge of cloud platforms (AWS, Azure, GCP).Proficiency in CI / CD tools (Jenkins, GitLab CI, GitHub Actions, CircleCI, etc.).Experience with security scanning tools : Snyk, SonarQube, Checkmarx, Aqua, Twistlock, etc.Familiarity with IaC tools (Terraform, Ansible, Chef, etc.).Programming / scripting skills in Python, Bash, Go, or similar.Experience with containerization and orchestration (Docker, Kubernetes).Understanding of application security principles (OWASP Top 10, secure SDLC).Strong problem-solving and analytical skills.Excellent communication and collaboration abilities.Preferred Qualifications :
Security certifications such as CISSP , CEH , OSCP , AWS Security Specialty , or Certified DevSecOps Professional .Experience with zero trust architecture and security automation.Knowledge of logging and monitoring tools (ELK, Splunk, Prometheus, Grafana, etc.).