Job
Description
Job Summary: We are seeking a skilled DevSecOps Engineer to join our XOps team. You will be responsible for integrating security practices within the DevOps pipeline, ensuring secure software development and deployment processes. Youll work closely with development, operations, and security teams to embed automated tools and processes into CI/CD workflows. Key Responsibilities: Design, implement, and manage CI/CD pipelines using tools like Jenkins , GitHub etc. Integrate and manage security tools such as Snyk , SonarQube , JFrog etc., to detect vulnerabilities early in the development lifecycle. Automate security testing and compliance checks as part of the DevOps process. Collaborate with development teams to remediate identified vulnerabilities. Ensure infrastructure as code (IaC) is securely designed and deployed. Drive container security and orchestration using tools like Docker , Kubernetes , Trivy , etc. Maintain compliance with security standards (e.g., OWASP, NIST, ISO 27001). Contribute to monitoring and incident response automation. Required Skills: Strong hands-on experience with Jenkins , Snyk , SonarQube , and static/dynamic code analysis tools. Proficiency in scripting languages (e.g., Python, Bash). Experience with version control systems like Git . Working knowledge of container security, IaC (Terraform, CloudFormation), and secrets management tools (e.g., Vault, AWS Secrets Manager). Familiarity with security practices in cloud environments (AWS, Azure, or GCP). Preferred Qualifications: Certifications such as Certified DevSecOps Professional , AWS Security , or Azure Security Engineer . Knowledge of compliance frameworks (SOC 2, HIPAA, GDPR). Experience in threat modeling and risk assessment.
