DevSecOps Engineer

About the Role We are looking for a passionate and skilled DevSecOps Engineer with 2+ years of experience in DevOps and cloud security practices. The ideal candidate should have hands-on experience in implementing security across CI/CD pipelines, cloud infrastructure, containerized environments, and application deployments. The role involves integrating security into every stage of the software development lifecycle (SDLC) while ensuring scalable, reliable, and secure deployments. Key Responsibilities

• Implement and maintain secure CI/CD pipelines.
• Integrate security controls into DevOps processes and workflows.
• Perform vulnerability assessments and security scans on applications, containers, and infrastructure.
• Automate security testing within build and deployment pipelines.
• Monitor cloud environments and ensure adherence to security best practices.
• Collaborate with Development, QA, and Infrastructure teams to remediate security vulnerabilities.
• Configure and manage IAM policies, access controls, and secrets management.
• Support compliance initiatives and security audits.
• Monitor, investigate, and respond to security incidents.
• Implement Infrastructure as Code (IaC) security best practices.
• Ensure secure containerization and Kubernetes deployments. Required Skills DevOps & Cloud
• AWS, Azure, or GCP
• CI/CD Pipelines (Jenkins, GitHub Actions, GitLab CI/CD)
• Docker
• Kubernetes
• Linux Administration
• Shell Scripting Security
• Application Security (AppSec)
• Vulnerability Management
• OWASP Top 10
• Security Testing
• Container Security
• Cloud Security
• Identity & Access Management (IAM)
• Secrets Management Infrastructure as Code
• Terraform
• CloudFormation (Good to Have) Security Tools Experience with one or more of the following:
• SonarQube
• Snyk
• Trivy
• OWASP ZAP
• Checkmarx
• Veracode
• Aqua Security
• Prisma Cloud Monitoring & Logging
• ELK Stack
• Grafana
• Prometheus
• CloudWatch Preferred Qualifications
• Bachelor's degree in Computer Science, Information Technology, or related field.
• Experience working in Agile/Scrum environments.
• Understanding of Secure SDLC principles.
• Knowledge of security compliance standards such as ISO 27001, SOC 2, PCI-DSS, or GDPR. Good to Have
• Kubernetes Security
• DevSecOps Automation
• Incident Response
• Threat Modeling
• Security Compliance & Audits
• Multi-cloud exposure (AWS/Azure/GCP) Preferred Certifications
• AWS Certified Security – Specialty
• AWS Certified Solutions Architect
• Certified Kubernetes Security Specialist (CKS)
• CEH (Certified Ethical Hacker)
• CompTIA Security+
• DevSecOps Foundation Certification Key Skills
• DevSecOps | AWS | Azure | GCP | Jenkins | GitHub Actions | GitLab CI/CD | Docker | Kubernetes | Terraform | SonarQube | Snyk | Trivy | OWASP | IAM | Cloud Security | Container Security | Linux | CI/CD | Vulnerability Management