Description

Secure and automate infrastructure and deployment pipelines.

This role is on-site.

Responsibilities

• Integrate security tools and automated checks directly into CI/CD pipelines.
• Manage infrastructure using Terraform or CloudFormation following secure IaC practices.
• Execute vulnerability management through SAST, DAST, and container scanning with tools like Trivy or Anchore.
• Configure monitoring and logging using the ELK Stack, Prometheus, and Grafana to support SOC incident response.
• Partner with developers and operations to implement secure coding practices and embed security into the lifecycle.

Required Skills

• 5+ years of experience in DevSecOps or security engineering roles.
• Hands-on experience with CI/CD pipelines.
• Proficiency with Terraform or CloudFormation for Infrastructure as Code.
• Experience with ELK Stack, Prometheus, and Grafana for monitoring.
• Knowledge of SAST and DAST methodologies.
• Experience with container security scanning tools.
• Familiarity with HIPAA, GDPR, and NIST compliance frameworks.

Preferred Skills

• Bachelor's degree or equivalent experience.

Key Skills

Education

Any Graduate