Job
Description
As a DevSecOps Engineer at our company, you will play a crucial role in integrating security practices within the DevOps pipeline to ensure secure software development and deployment processes. You will collaborate closely with development, operations, and security teams to embed automated tools and processes into CI/CD workflows. - Design, implement, and manage CI/CD pipelines using tools like Jenkins, GitHub, etc. - Integrate and manage security tools such as Snyk, SonarQube, JFrog, etc., to detect vulnerabilities early in the development lifecycle. - Automate security testing and compliance checks as part of the DevOps process. - Collaborate with development teams to remediate identified vulnerabilities. - Ensure infrastructure as code (IaC) is securely designed and deployed. - Drive container security and orchestration using tools like Docker, Kubernetes, Trivy, etc. - Maintain compliance with security standards (e.g., OWASP, NIST, ISO 27001). - Contribute to monitoring and incident response automation. Your required skills for this role include: - Strong hands-on experience with Jenkins, Snyk, SonarQube, and static/dynamic code analysis tools. - Proficiency in scripting languages (e.g., Python, Bash). - Experience with version control systems like Git. - Working knowledge of container security, IaC (Terraform, CloudFormation), and secrets management tools (e.g., Vault, AWS Secrets Manager). - Familiarity with security practices in cloud environments (AWS, Azure, or GCP). Preferred qualifications for this position include: - Certifications such as Certified DevSecOps Professional, AWS Security, or Azure Security Engineer. - Knowledge of compliance frameworks (SOC 2, HIPAA, GDPR). - Experience in threat modeling and risk assessment. As a DevSecOps Engineer at our company, you will play a crucial role in integrating security practices within the DevOps pipeline to ensure secure software development and deployment processes. You will collaborate closely with development, operations, and security teams to embed automated tools and processes into CI/CD workflows. - Design, implement, and manage CI/CD pipelines using tools like Jenkins, GitHub, etc. - Integrate and manage security tools such as Snyk, SonarQube, JFrog, etc., to detect vulnerabilities early in the development lifecycle. - Automate security testing and compliance checks as part of the DevOps process. - Collaborate with development teams to remediate identified vulnerabilities. - Ensure infrastructure as code (IaC) is securely designed and deployed. - Drive container security and orchestration using tools like Docker, Kubernetes, Trivy, etc. - Maintain compliance with security standards (e.g., OWASP, NIST, ISO 27001). - Contribute to monitoring and incident response automation. Your required skills for this role include: - Strong hands-on experience with Jenkins, Snyk, SonarQube, and static/dynamic code analysis tools. - Proficiency in scripting languages (e.g., Python, Bash). - Experience with version control systems like Git. - Working knowledge of container security, IaC (Terraform, CloudFormation), and secrets management tools (e.g., Vault, AWS Secrets Manager). - Familiarity with security practices in cloud environments (AWS, Azure, or GCP). Preferred qualifications for this position include: - Certifications such as Certified DevSecOps Professional, AWS Security, or Azure Security Engineer. - Knowledge of compliance frameworks (SOC 2, HIPAA, GDPR). - Experience in threat modeling and risk assessment.
