Description

You will embed security into every stage of the development and deployment pipeline to ensure secure, compliant, and resilient products.

Responsibilities

• Design and implement secure CI/CD pipelines with integrated security tools.
• Develop automated security testing solutions including SAST, DAST, SCA, and IaC scanning.
• Harden infrastructure and cloud environments using Terraform, Ansible, or CloudFormation.
• Manage container and orchestration security across Docker, Kubernetes, and Helm.
• Conduct secure code reviews, vulnerability assessments, and penetration testing on web and mobile applications.
• Lead threat modeling sessions and perform secure architecture reviews.

Required Skills

• 5+ years of experience in DevSecOps, Application Security, or Security Engineering.
• Hands-on experience with Jenkins, GitLab CI, or Azure DevOps.
• Proficiency with security tools such as SonarQube, Checkmarx, Veracode, Burp Suite, OWASP ZAP, or Snyk.
• Strong knowledge of secure SDLC, CI/CD practices, and OWASP Top 10.
• Experience with cloud platforms including AWS, Azure, or GCP.
• Practical knowledge of container security tools like Aqua or Prisma Cloud.
• Ability to script and code in Python, JavaScript, or Java.
• Expertise in Infrastructure as Code (IaC) and container orchestration.

Key Skills

Education

Any Graduate