DevSecOps Engineer

Job Summary :

We are seeking a highly skilled DevSecOps Engineer to join our team and help integrate security at every phase of the software development lifecycle. The ideal candidate will have a strong background in DevOps, cloud infrastructure, and cybersecurity, with a focus on automation, continuous integration / continuous delivery (CI / CD), and secure coding practices.

Key Responsibilities :

• Implement and maintain security tools and practices within CI / CD pipelines.
• Automate security scanning (SAST, DAST, SCA, container security, etc.) and integrate them into build and deployment processes.
• Collaborate with development, operations, and security teams to ensure secure code deployment.
• Conduct threat modeling, risk assessments, and vulnerability management.
• Manage secrets and credentials securely using tools like HashiCorp Vault, AWS Secrets Manager, etc.
• Monitor and respond to security incidents and alerts.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC2, GDPR, NIST).
• Define and enforce policies related to secure code development and infrastructure security.
• Maintain infrastructure as code (IaC) using Terraform, CloudFormation, etc., with security best practices.
• Educate developers and operations teams on secure coding and cloud security practices.

Required Skills & Qualifications :

Preferred Qualifications :