Devsecops Engineer

Role & responsibilities

Technical Skills Must Have

• Hands-on expertise with a continuous integration system (for example, TeamCity) and a continuous delivery system (for example, Octopus Deploy), including reusable templates and quality gates.

• Proficiency with modern Git workflows (for example, Bitbucket), including branching strategy, protection rules, and code-owner boundaries.

• Strong background in Amazon Web Services application delivery (compute, containers, networking, identity and access management) and infrastructure as code (for example, CloudFormation or Terraform).

• Experience integrating code and dependency scanning into pipelines using a commercial or open-source platform (for example, Veracode) with policy enforcement and developer remediation loops.

• Experience operating external attack-surface and vendor-risk monitoring with a platform such as UpGuard, with documented remediation and governance.

• Experience running dynamic application security testing with a platform such as Invicti and incorporating results into release gates.

• Security fundamentals: secrets management, least-privilege access, dependency and image scanning, baseline hardening.

• Scripting and automation (for example, Python, Bash, or PowerShell) for pipelines, environment management, diagnostics, and reporting.

• Containerization fundamentals (Docker and Kubernetes) and image policy management.

Technical Skills – Good to Have

• Observability stacks (for example, CloudWatch, Prometheus, Elasticsearch/Logstash/Kibana, Datadog) and cost monitoring.

• Experience in compliance-sensitive environments and change-management processes.

• Policy-as-code, software bill of materials workflows, and supply-chain hardening (signing and provenance).

• Multi-account landing zones and migration experience on Amazon Web Services.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field (or equivalent experience).

• Ten or more years in DevOps, DevSecOps, or Site Reliability Engineering with ownership of cross-functional delivery initiatives.

• Proven leadership scaling teams and practices—hiring, coaching, standards, budgeting, and governance.

• Demonstrated success improving delivery, reliability, and security metrics and driving predictable releases.

• Excellent stakeholder management and communication; crisp decision logs and status updates.

• Willingness to participate in and lead on-call and incident-commander rotations.