Description

You will integrate security automation and compliance into the development lifecycle.

Responsibilities

• Integrate security tools and automated checks directly into CI/CD pipelines.
• Manage infrastructure security using Terraform and CloudFormation.
• Execute vulnerability management through SAST, DAST, and container scanning with tools like Trivy or Anchore.
• Maintain compliance with HIPAA, GDPR, and NIST standards through rigorous documentation and audit trails.
• Configure monitoring and logging using ELK Stack, Prometheus, and Grafana to support incident response.
• Train development teams on secure coding practices and collaborate with SOC teams on incident detection.

Required Skills

• 5+ years of experience in DevSecOps or related security engineering roles.
• Hands-on experience with CI/CD pipelines.
• Proficiency with Infrastructure as Code (IaC) using Terraform or CloudFormation.
• Experience with ELK Stack, Prometheus, and Grafana for monitoring and logging.
• Knowledge of SAST and DAST methodologies.
• Experience with container security scanning.
• Familiarity with regulatory frameworks such as HIPAA, GDPR, or NIST.
• Bachelor's degree or equivalent experience.

Key Skills

Education

Any Graduate