DevSecOps Engineer

The Role
Were seeking a security professional with 4-6 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards. This role emphasizes integrating security into CI/CD pipelines, mitigating vulnerabilities, and ensuring AWS environments maintain the highest security benchmarks.

Key Responsibilities
Integrate security measures within AWS CI/CD pipelines (e.g., Code Pipeline, Code Build, Code Deploy).Manage Infrastructure as Code (IaC) using Terraform and CloudFormation with encryption and least privilege principles.Deploy and monitor AWS security tools such as GuardDuty, WAF, Shield, Security Hub, and Inspector.Ensure container security across ECS/EKS environments.Automate vulnerability management, patching, and antimalware solutions.Enforce robust IAM policies, SSO, MFA, and secrets management practices.Support SOC 2, ISO 27001, and GDPR compliance audits and risk assessments.Implement and manage monitoring and logging tools like CloudWatch, CloudTrail, and SIEM systems.Develop risk management frameworks and automate incident response processes.Draft, review, and implement cybersecurity and information security policies.Collaborate with stakeholders to ensure readiness of controls for non-security domains such as HR systems, application infrastructure, and data engineering infrastructure.

Qualification
4-6 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standardsCloud Security: Proficiency in AWS Security services, including GuardDuty, WAF, Inspector, Security Hub,VPC, IAMInfrastructure as Code: Hands-on experience with Terraform, CloudFormation, AWS Config, Control TowerCI/CD Tools: Familiarity with AWS Code Pipeline, Jenkins, and GitHub for secure software delivery Compliance Frameworks: Strong understanding of SOC 2, ISO 27001, GDPR, NIST, CIS AWS

Benchmarks
Antimalware Solutions: Experience with TrendMicro, and GuardDuty for threat detection and prevention