Description

You will integrate security controls and automation into CI/CD pipelines to ensure continuous assessment and compliance.

This role is on-site.

Responsibilities

• Embed security automation into CI/CD workflows using SAST, DAST, and SCA tools.
• Design and implement security for cloud-native architectures across AWS, Azure, and GCP.
• Manage secrets, IAM policies, and network security configurations.
• Develop scripts and tools to automate security checks and maintain IaC security.
• Monitor infrastructure vulnerabilities and ensure compliance with ISO 27001, SOC 2, and GDPR.

Required Skills

• 12+ years of experience in security or DevOps engineering.
• Proficiency in Python and Bash scripting.
• Hands-on experience with CI/CD pipeline integration.
• Deep knowledge of AWS, Azure, and GCP security configurations.
• Experience implementing OWASP Top 10 security standards.
• Direct experience with HashiCorp Vault, Aqua, and Prisma Cloud.
• Ability to secure Infrastructure as Code (IaC) using tools like Checkov, tfsec, or Conftest.
• Bachelor's or Master's degree in a relevant field.

Key Skills

Education

Bachelor's or Master's degrees