DevSecOps Engineer

The Role Were seeking a security professional with 4-6 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards. This role emphasizes integrating security into CI/CD pipelines, mitigating vulnerabilities, and ensuring AWS environments maintain the highest security benchmarks. Key Responsibilities Integrate security measures within AWS CI/CD pipelines (e.g., Code Pipeline, Code Build, Code Deploy). Manage Infrastructure as Code (IaC) using Terraform and CloudFormation with encryption and least privilege principles. Deploy and monitor AWS security tools such as GuardDuty, WAF, Shield, Security Hub, and Inspector. Ensure container security across ECS/EKS environments. Automate vulnerability management, patching, and antimalware solutions. Enforce robust IAM policies, SSO, MFA, and secrets management practices. Support SOC 2, ISO 27001, and GDPR compliance audits and risk assessments. Implement and manage monitoring and logging tools like CloudWatch, CloudTrail, and SIEM systems. Develop risk management frameworks and automate incident response processes. Draft, review, and implement cybersecurity and information security policies. Collaborate with stakeholders to ensure readiness of controls for non-security domains such as HR systems, application infrastructure, and data engineering infrastructure. Qualification 4-6 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards Cloud Security: Proficiency in AWS Security services, including GuardDuty, WAF, Inspector, Security Hub,VPC, IAM Infrastructure as Code: Hands-on experience with Terraform, CloudFormation, AWS Config, Control Tower CI/CD Tools: Familiarity with AWS Code Pipeline, Jenkins, and GitHub for secure software delivery Compliance Frameworks: Strong understanding of SOC 2, ISO 27001, GDPR, NIST, CIS AWS Benchmarks Antimalware Solutions: Experience with TrendMicro, and GuardDuty for threat detection and prevention