Description

You will design and implement secure software delivery pipelines, integrating application security controls into development, platform, and operational workflows.

This role is on-site.

Responsibilities

• Design and improve secure CI/CD workflows, ensuring scalability and resilience across the enterprise.
• Implement application security controls including static analysis, dependency validation, secret detection, and infrastructure-as-code security.
• Drive maturation of SSDLC practices, including threat modeling, secure coding standards, and vulnerability remediation.
• Troubleshoot complex DevSecOps tooling and integration issues while defining secure engineering patterns.
• Mentor junior engineers through technical guidance, code reviews, and best practices without direct people management.

Required Skills

• 7+ years of IT experience with 5+ years in technical cybersecurity (including 3+ in DevSecOps).
• Deep understanding of Secure Software Development Lifecycle (SSDLC) and modern application security principles.
• Strong expertise in designing and implementing secure CI/CD pipelines and automation.
• Advanced scripting, automation, and infrastructure-as-code capabilities.
• Expert-level cybersecurity certification (CISSP, CASP, CCSP, or equivalent).
• Ability to partner with development, platform, and infrastructure teams to influence architecture and design.
• Experience communicating technical risks and security recommendations to stakeholders.

Preferred Skills

• Proven track record of improving engineering reliability and observability of DevSecOps tooling.
• Experience maintaining comprehensive documentation for engineering standards and workflows.

Key Skills

Education

Any Graduate