Description

You will embed security into every stage of the software development and deployment pipeline.

Responsibilities

• Design and implement secure CI/CD pipelines with integrated security tools.
• Develop automated security testing solutions including SAST, DAST, SCA, and IaC scanning.
• Harden infrastructure and cloud environments across AWS, Azure, or GCP.
• Manage container and orchestration security using Docker, Kubernetes, and Helm.
• Conduct secure code reviews, vulnerability assessments, and penetration testing.
• Lead threat modeling sessions and secure architecture reviews.
• Remediate vulnerabilities by collaborating with development and QA teams.

Required Skills

• 5+ years of experience in DevSecOps, Application Security, or Security Engineering.
• Proficiency with AWS, Azure, or GCP cloud platforms.
• Hands-on experience with Terraform, Ansible, or CloudFormation.
• Expertise in Docker, Kubernetes, and Helm.
• Strong scripting skills in Python.
• Experience integrating security tools into Jenkins, GitLab CI, or Azure DevOps.
• Knowledge of SonarQube, Checkmarx, Veracode, Burp Suite, OWASP ZAP, or Snyk.
• Understanding of OWASP Top 10, CWE/SANS 25, and secure SDLC practices.
• Experience with container security tools like Aqua or Prisma Cloud.

Key Skills

Education

Any Graduate