DevSecOps Engineer

Key Responsibilities:

Incorporate security measures into every stage of the DevOps pipeline to protect applications and APIs.

Implement and maintain controls within the Continuous Integration/Continuous Deployment (CI/CD) pipeline to meet necessary security standards.

Gain experience with SAST (Static Application Security Testing), SCA (Software Composition Analysis), DAST (Dynamic Application Security Testing), IaC (Infrastructure as Code) security, Container security, integrating security in IDEs (Integrated Development Environments), and API security.

Regular usage of automated tools for routine security checks.

Facilitate collaboration among development, operations, and security teams.

Develop policies that align with regulations, alongside conducting comprehensive assessments of application/API security.

Educate teams about secure application/API usage, keeping up-to-date with cybersecurity trends, ensuring adherence to secure design principles across all Software Development Life Cycle (SDLC) phases, managing incident response protocols, and providing training on secure coding best practices.

Utilize automation tools to identify potential vulnerabilities before they escalate into threats.

Evaluate third-party services for potential weaknesses in their security posture.

Additional duties include ensuring that vulnerabilities are remediated before code moves to production and providing guidance on the remediation process for application/API security vulnerabilities. This role also requires collaboration with Information Security Officers (ISOs), DevOps teams, Application Development teams, Vendor Partners, and Cyber Engineering teams. The position ensures compliance with industry-specific regulations such as GDPR or HIPAA.