DevSecOps Engineer

About the Role :

We are looking for a proactive and technically skilled DevSecOps Engineer to integrate and operationalize security across our DevOps pipelines and cloud infrastructure. This role serves as a critical link between our security and engineering teams, embedding robust security practices into every stage of the software development lifecycle (SDLC), CI / CD workflows, and cloud-native deployments.

The ideal candidate is passionate about automation, prevention-focused, and experienced in building scalable security controls within fast-paced engineering environments.

Key Responsibilities

1. Secure DevOps & Control Enforcement

• Monitor CI / CD pipelines (e.g., AWS Code Pipeline, GitHub Actions) for policy violations, secret exposures, and insecure configurations.
• Analyze and interpret results from security tools like SAST, DAST, IAST (e.g., SonarQube, Check Marx, OWASP ZAP, Dependency-Check).
• Perform vulnerability triage on container scan reports and provide remediation guidance (e.g., base image hardening).
• Conduct Infrastructure-as-Code (IaC) security reviews (Terraform, CloudFormation) to detect misconfigurations pre-deployment.
• Enforce security guardrails within pipeline configurations (e.g., code signing, mandatory static analysis steps).
• Monitor logs and security dashboards for anomalies in production and staging environments.
• Provide real-time support for security events within the CI / CD or cloud infrastructure.

2. Security Automation & Collaboration

Ongoing Contributions

Qualifications & Experience

Soft Skills & Attributes

Why Join Us?