DevSecOps Engineer

The core responsibilities for the job include the following:

Cloud Security (AWS):

• Design, implement, and maintain security controls across AWS environments.
• Configure and manage AWS security services, including IAM, AWS Organizations, GuardDuty, Security Hub, Inspector, WAF, KMS, Secrets Manager, CloudTrail, and Config.
• Perform security assessments, cloud posture reviews, and remediation activities.
• Implement least privilege access controls and identity governance.

Kubernetes and Container Security:

• Secure Kubernetes clusters (EKS preferred) and containerized workloads.
• Implement security controls for RBAC, network policies, pod security standards, admission controllers, and service mesh security.
• Conduct container vulnerability assessments and image scanning.
• Manage runtime protection and container security platforms.
• Ensure compliance with Kubernetes security best practices.

Secure CI/CD and DevSecOps:

• Integrate security into CI/CD pipelines using DevSecOps principles.
• Implement and maintain: SAST, DAST, SCA (Software Composition Analysis), Secrets Scanning, Container Scanning, and IaC Security Scanning.
• Automate security checks within Jenkins, GitHub Actions, GitLab CI/CD, or similar tools.
• Establish secure release and deployment processes.