DevSecOps Engineer

Job Title- DevSecOps Engineer

Job Summary-

Responsibilities:-

• Develop and maintain DevSecOps practices and tools to ensure security and compliance.
• Implement and enforce OWASP, MITRE, SOC 2, and NIST security best practices and frameworks.
• Conduct security assessments, vulnerability scans, and penetration testing. -
• Collaborate with development teams to integrate security into the CI/CD pipeline and automate security testing and compliance checks. -
• Manage and maintain security tools, including WAFs, IDS/IPS, and vulnerability scanners. -
• Respond to security incidents and perform root cause analysis. -
• Stay up-to-date with the latest security threats, trends, and technologies.
  

Requirements

• BS/MS in Computer Science, Information Security, or a related field.
• 5-8 years of experience in DevSecOps, security engineering, or a related field. -
• Familiarity with OWASP, MITRE, SOC 2, and NIST security frameworks and best practices.
• At least basic familiarity with PHP and Ruby on Rails development.
• Experience with GitHub, GitHub Actions, and Dependabot for code management and security.
• Experience with Azure and AWS for infrastructure management and security.
• Understanding of security compliance and regulatory requirements.
• Problem-solving, communication, and collaboration skills.
• Experience with security tools, including WAFs, IDS/IPS, and vulnerability scanners.
• Incident response and root cause analysis experience.