Staff DevSecOps Engineer

Responsibilities:

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design. "
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls acrossAWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection and Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling and Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team's infrastructure and deployments are compliant with industry regulations and Tekion's internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

Requirements:

• Bachelor's degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 9+ years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles. Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains(e. g., Jenkins, Tekton, GitHub Actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc. ) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modelling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.