Key skills
DevSecOpsDevOpsCybersecurity EngineeringSecurity tooling integrationSnykTrivyAqua SecurityCI/CD pipelinesPolicy as CodeOpen Policy AgentSecrets managementInfrastructure as Code securityContainer securityCloud-native securityCI/CD
About this role
BairesDev has been leading the way in technology projects for over 15 years, delivering cutting-edge solutions to major companies and innovative startups. The Senior DevSecOps Engineer will integrate security practices into the software development lifecycle and act as the primary link between development, operations, and security teams.
Responsibilities:
- Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines
- Codify security standards and governance policies using Policy as Code frameworks to ensure continuous compliance
- Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines
- Oversee the implementation and rotation of enterprise-wide secrets management and sensitive data protection strategies
- Conduct threat modeling and architectural reviews to proactively address risks in cloud-native environments
Requirements:
- 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering
- Proven expertise in integrating security tooling like Snyk, Trivy, or Aqua into CI/CD pipelines
- Proficiency in implementing Policy as Code using Open Policy Agent (OPA) or similar frameworks
- Hands-on experience with secrets management and Infrastructure as Code security
- Deep understanding of container security and cloud-native protection strategies
- Advanced proficiency in English