Description

Integrate security practices into the DevOps methodology to ensure the safe release of code and APIs.

This role is on-site.

Responsibilities

• Incorporate security measures into every stage of the DevOps pipeline to protect applications and APIs.
• Implement and maintain security controls within CI/CD pipelines to meet compliance standards.
• Utilize automated tools for routine security checks and to identify vulnerabilities before they escalate.
• Collaborate with development, operations, security, and vendor teams to facilitate secure design principles.
• Provide guidance on the remediation process for application and API security vulnerabilities.

Required Skills

• 8+ years of experience with CI/CD pipelines and Jenkins.
• 5+ years of experience in a similar role within a large, geographically dispersed environment.
• Deep understanding of SAST, SCA, DAST, IaC security, container security, and API security.
• Knowledge of industry-standard regulations and frameworks including ISO, PCI, NIST, HIPAA, GDPR, and OWASP Top 10.
• Experience with risk management and information security principles.
• Ability to work US morning business hours (1:30 PM IST to 9:30 PM IST).
• Bachelor’s degree in IT, Cybersecurity, or a related field, or equivalent work experience.

Preferred Skills

• Security certifications such as CISSP, OSCP, or CEH.
• Experience with vulnerability assessment tools like Checkmarx or Microsoft Defender.
• Expertise in reporting and metrics using ServiceNow (SecOps) or PowerBI.

Key Skills

Education

Any Graduate