Staff DevSecOps Engineer

Responsibilities:

Cloud Security (AWS):

• Design, implement, and maintain security controls across AWS environments.
• Configure and manage AWS security services, including:
• IAM
• AWS Organisations
• GuardDuty
• Security Hub
• Inspector
• WAF
• KMS
• Secrets Manager
• CloudTrail
• Config
• Perform security assessments, cloud posture reviews, and remediation activities.
• Implement least privilege access controls and identity governance.

Kubernetes and Container Security:

• Secure Kubernetes clusters (EKS preferred) and containerised workloads.
• Implement security controls for:
• RBAC
• Network Policies
• Pod Security Standards
• Admission Controllers
• Service Mesh Security
• Conduct container vulnerability assessments and image scanning.
• Manage runtime protection and container security platforms.
• Ensure compliance with Kubernetes security best practices.

Secure CI/CD and DevSecOps:

• Integrate security into CI/CD pipelines using DevSecOps principles.
• Implement and maintain:
• SAST
• DAST
• SCA (Software Composition Analysis)
• Secrets Scanning
• Container Scanning
• IaC Security Scanning
• Automate security checks within Jenkins, GitHub Actions, GitLab CI/CD, or similar tools.
• Establish secure release and deployment processes.