Devsecops Engineer

We're hiring a DevSecOps & Application Security Engineer to embed security across our cloud infrastructure, applications, and CI/CD pipelines.

What you'll do

• Integrate security controls and scanning into the SDLC and CI/CD pipelines
• Build and maintain secure Infrastructure as Code with Terraform
• Implement security controls across AWS and Azure
• Manage SAST, DAST, dependency and secret scanning; triage and tune findings
• Conduct secure code reviews and drive remediation with engineering teams
• Work with PAM, PKI, certificates and secrets management
• Support SBOM and software supply chain security practices

What you need

• 7 to 10 years in DevSecOps, Application Security or Cloud Security
• Strong hands-on Terraform and IaC
• Hands-on SAST/DAST and CI/CD security integration
• AWS or Azure security experience
• Veracode, GitHub Advanced Security or similar (Checkmarx, Fortify, Snyk)
• Secure code review and vulnerability management

Good to have
CyberArk PAM or Vault, PKI, SBOM, Sigstore/Cosign, Policy as Code, security certifications (AWS Security Specialty, AZ-500, CKS)