Job Description
Job Summary:
We are seeking a highly skilled DevSecOps Engineer to join our team and help integrate security at every phase of the software development lifecycle.
The ideal candidate will have a strong background in DevOps, cloud infrastructure, and cybersecurity, with a focus on automation, continuous integration/continuous delivery (CI/CD), and secure coding practices.
Key Responsibilities:
Implement and maintain security tools and practices within CI/CD pipelines.
Automate security scanning (SAST, DAST, SCA, container security, etc.) and integrate them into build and deployment processes.
Collaborate with development, operations, and security teams to ensure secure code deployment.
Conduct threat modeling, risk assessments, and vulnerability management.
Manage secrets and credentials securely using tools like HashiCorp Vault, AWS Secrets Manager, etc.
Monitor and respond to security incidents and alerts.
Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC2, GDPR, NIST).
Define and enforce policies related to secure code development and infrastructure security.
Maintain infrastructure as code (IaC) using Terraform, CloudFormation, etc., with security best practices.
Educate developers and operations teams on secure coding and cloud security practices.
Required Skills & Qualifications:
Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience).
5+ years of experience in DevOps, cloud security, or a related role.
Strong knowledge of cloud platforms (AWS, Azure, GCP).
Proficiency in CI/CD tools (Jenkins, GitLab CI, GitHub Actions, CircleCI, etc.).
Experience with security scanning tools: Snyk, SonarQube, Checkmarx, Aqua, Twistlock, etc.
Familiarity with IaC tools (Terraform, Ansible, Chef, etc.).
Programming/scripting skills in Python, Bash, Go, or similar.
Experience with containerization and orchestration (Docker, Kubernetes).
Understanding of application security principles (OWASP Top 10, secure SDLC).
Strong problem-solving and analytical skills.
Excellent communication and collaboration abilities.
Preferred Qualifications:
Security certifications such as CISSP , CEH , OSCP , AWS Security Specialty , or Certified DevSecOps Professional .
Experience with zero trust architecture and security automation.
Knowledge of logging and monitoring tools (ELK, Splunk, Prometheus, Grafana, etc.).