Description

Embed security into every stage of the software development and deployment pipeline.

This role is on-site.

Responsibilities

• Design and implement secure CI/CD pipelines with integrated security tools.
• Develop automated security testing solutions including SAST, DAST, SCA, and IaC scanning.
• Conduct secure code reviews, vulnerability assessments, and penetration testing.
• Lead threat modeling sessions and secure architecture reviews.
• Remediate vulnerabilities by collaborating with development and QA teams.

Required Skills

• 5+ years of experience in DevSecOps, Application Security, or Security Engineering.
• Proficiency with AWS, Azure, or GCP cloud platforms.
• Hands-on experience with Terraform, Ansible, or CloudFormation.
• Expertise in Docker, Kubernetes, and Helm.
• Strong scripting skills in Python.
• Experience integrating security tools into Jenkins, GitLab CI, or Azure DevOps.
• Knowledge of SonarQube, Checkmarx, Veracode, Burp Suite, OWASP ZAP, or Snyk.
• Understanding of OWASP Top 10, CWE/SANS 25, and secure SDLC practices.

Preferred Skills

• Experience with container security tools like Aqua or Prisma Cloud.
• Experience hardening infrastructure and cloud environments.

Key Skills

Education

Any Graduate