Description

Integrate security automation and governance into the software development lifecycle.

This role is on-site.

Responsibilities

• Integrate security tools and automated checks directly into CI/CD pipelines.
• Manage infrastructure security using Terraform and CloudFormation.
• Execute vulnerability management through SAST/DAST and container security scanning with tools like Trivy or Anchore.
• Ensure compliance with regulatory standards including HIPAA, GDPR, and NIST through audit trails and documentation.
• Configure monitoring and logging using the ELK Stack, Prometheus, and Grafana to support incident response.

Required Skills

• 5+ years of experience in DevSecOps or security engineering roles.
• Hands-on experience with CI/CD pipelines.
• Proficiency with Infrastructure as Code tools such as Terraform and CloudFormation.
• Experience with monitoring and observability stacks including ELK Stack, Prometheus, and Grafana.
• Knowledge of container security scanning processes.
• Understanding of SAST and DAST methodologies.
• Familiarity with security frameworks such as NIST, HIPAA, or GDPR.
• Ability to collaborate with SOC teams and developers to embed secure coding practices.

Key Skills

Education

Any Graduate