Description

You will integrate security measures throughout the software development lifecycle by collaborating with development, security, and operations teams.

Responsibilities

• Design, deploy, and manage CI/CD pipelines using Jenkins, GitLab, and GitHub.
• Implement automated security testing protocols using SonarQube, Snyk, and Blackduck.
• Identify and rectify security vulnerabilities and conduct penetration testing.
• Develop secure coding standards and uphold security policies throughout the SDLC.
• Manage security incidents and participate in active incident response.

Required Skills

• 5+ years of hands-on experience in DevSecOps or security engineering.
• Proficiency with CI/CD tools including Jenkins, GitLab, and GitHub.
• Experience with automated security testing using SonarQube.
• Strong scripting skills in Python, Bash, or PowerShell.
• Knowledge of containerization technologies such as Docker and Kubernetes.
• Understanding of SAST, DAST/IAST, VAPT, and Application Performance Monitoring.
• Expertise in designing security solutions within continuous delivery environments.

Preferred Skills

• Experience with AWS, Azure, or GCP.
• Proficiency with infrastructure-as-code tools like Terraform or Ansible.
• Knowledge of network security, firewalls, and intrusion detection/prevention systems.

Key Skills

Education

Any Graduate