Description

Integrate security into CI/CD pipelines, harden AWS infrastructure, and drive vulnerability remediation across services.

This role is remote.

Responsibilities

• Implement SAST, DAST, SCA, secrets management, and IaC scanning within CI/CD workflows.
• Conduct application security reviews, threat modeling, and provide remediation guidance to engineering teams.
• Harden AWS cloud infrastructure using policy-as-code and security guardrails.
• Triage vulnerabilities and drive remediation efforts across services.

Required Skills

• 5+ years of experience in DevSecOps or cloud security engineering.
• Deep expertise in AWS cloud security, including IAM, networking, and guardrails.
• Proficiency in Python for security automation and tooling development.
• Hands-on experience with DevSecOps tools such as Snyk, Checkmarx, or Trivy.
• Strong knowledge of Infrastructure as Code (IaC) with Terraform.
• Experience securing containers and Kubernetes environments.
• Familiarity with SQL for data and log analysis.

Preferred Skills

• Professional certifications such as AWS Security, OSCP, or CISSP.
• Experience implementing HITRUST, SOC 2, or HIPAA controls.

Key Skills

Education

Any Graduate