Devsecops Engineer

Role & responsibilities

Key Responsibilities:

* Implement, manage, and optimize CI/CD pipelines with integrated security checks.

* Automate infrastructure security using tools such as Terraform, Ansible, or CloudFormation.

* Perform threat modeling, vulnerability scanning, and risk assessments across applications and infrastructure.

* Integrate SAST, DAST, SCA, and container security tools into development workflows.

* Collaborate with development, QA, and operations teams to enforce secure coding practices.

* Configure and manage cloud security (AWS / Azure / GCP) including IAM, security groups, and monitoring.

* Monitor, detect, and respond to security incidents in CI/CD and cloud environments.

* Ensure compliance with industry standards such as ISO 27001, SOC2, GDPR, HIPAA, or PCI-DSS.Advocate and implement DevSecOps best practices within the organization.

Required Skills & Experience:

* 79 years of overall IT experience with minimum 3+ years in DevSecOps/Security engineering.

* Strong knowledge of CI/CD tools: Jenkins, GitHub Actions, GitLab CI, Azure DevOps.

* Hands-on with security tools: SonarQube, Checkmarx, Fortify, OWASP ZAP, Aqua, Prisma Cloud, Snyk, etc.

* Expertise in cloud platforms: AWS, Azure, or GCP (with security focus).

* Experience in containerization & orchestration security: Docker, Kubernetes.

* Strong scripting knowledge: Python, Bash, Shell, Groovy, or PowerShell.

* Proficient in infrastructure as code (IaC) and securing IaC templates.

* Experience with SIEM and monitoring tools: Splunk, ELK, CloudWatch, Datadog.

* Understanding of zero-trust security models and modern security frameworks.

* Good knowledge of network security, firewalls, and identity/access management.