We are looking for an experienced DevSecOps Security Engineer responsible for integrating security practices into the software development lifecycle (SDLC), automating security processes, and securing cloud-native applications and infrastructure. The ideal candidate should have strong experience in CI/CD security, cloud security, Infrastructure as Code (IaC), container security, and vulnerability management.
Design, implement, and maintain secure CI/CD pipelines across enterprise environments.
Integrate security tools into DevOps workflows to enable continuous security testing.
Implement DevSecOps practices across development, testing, staging, and production environments.
Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
Implement Software Composition Analysis (SCA) to identify vulnerable open-source dependencies.
Secure containerized applications using Docker and Kubernetes.
Implement container image scanning and runtime security controls.
Perform Infrastructure as Code (IaC) security scanning using Terraform and CloudFormation.
Identify, analyze, and remediate security vulnerabilities across applications and infrastructure.
Implement secrets management and secure credential handling.
Collaborate with developers, DevOps engineers, cloud architects, and security teams.
Establish security policies, compliance controls, and automated security gates.
Monitor security events and integrate security findings into SIEM platforms.
Implement cloud security best practices across AWS, Azure, or Google Cloud Platform.
Support compliance requirements such as SOC 2, ISO 27001, PCI-DSS, and NIST.
