DevSecOps

About the Role:

Requirements

• Must have at least 3 years of hands-on experience focused on Kubernetes security.
• Expertise in partnering with application developers to define safe and secure communication patterns.
• Experience mentoring teams on secure workload design, zero-trust networking and Kubernetes security best practices.
• Serve as the subject matter expert with sound understanding of micro segmentation within Kubernetes environments.
• Proficiency in automating the deployment of baseline and workload-specific network policies.
• Exposure in integrating security policy enforcement into CI/CD pipelines.
• Preferred familiarity with SOC and Incident Response teams for building detection rules and playbooks for Kubernetes network attacks and lateral movement.
• Knowledge in deploying and managing runtime detection tools such as Falco, Cilium Tetragon, Sysdig, Prisma Cloud or Aqua to monitor suspicious network or process activity.
• Experience in collaborating with platform and DevOps teams to secure infrastructure-as-code using Terraform, Helm and Kustomize.
• Sound understanding of container image scanning, signing and runtime protection implementation.
• Proficiency in hardening Kubernetes clusters through RBAC, admission controllers and pod security standards.
• Familiarity in continuously monitoring and optimizing segmentation policies to balance security, performance and developer productivity.
• Expertise in defining and enforcing Kubernetes NetworkPolicies and service mesh policies such as Istio, Isovalent or Cilium.
• Must have strong capability to design, implement and maintain pod-level network micro segmentation to enforce least-privilege communication between workloads.