Description

Design and secure automated pipelines to embed security controls throughout the software development lifecycle.

This role is on-site.

Responsibilities

• Assess CI/CD pipeline architecture and deployment processes to identify automation opportunities.
• Modernize pipelines by removing manual processes and integrating automated security checks.
• Collaborate with development, operations, and security teams to implement security best practices and compliance standards.
• Evaluate and integrate security tools including SAST, DAST, SCA, and secrets management into development workflows.
• Review the effectiveness of secure coding practices and remediation of OWASP Top 10 vulnerabilities.

Required Skills

• 5+ years of experience in security engineering or designing and securing DevOps pipelines.
• Hands-on expertise with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.
• Proficiency with containerization and orchestration using Docker and Kubernetes.
• Experience with Infrastructure as Code (IaC) tools like Terraform and Ansible.
• Deep knowledge of cloud platforms (AWS, Azure, or GCP) and their native security services.
• Strong understanding of Secure Development Lifecycle (SDL) frameworks and secure coding practices.
• Scripting proficiency in Python, Bash, or PowerShell.

Preferred Skills

• CISSP, CCSK, or equivalent security certifications.
• Cloud-specific certifications in Security or DevOps for Azure, AWS, or GCP.

Key Skills

Education

Any Graduate