Description

You will integrate security practices into the DevOps lifecycle to ensure end-to-end security across software development, deployment, and operations.

Responsibilities

• Embed security checks including SAST, DAST, and SCA into CI/CD pipelines to automate vulnerability scanning and remediation.
• Secure IaC templates using Terraform or CloudFormation and implement policies to prevent misconfigurations.
• Configure security monitoring tools and respond to incidents through root cause analysis.
• Conduct threat modeling and risk assessments during design and development phases.
• Automate security tasks and integrate tools such as SonarQube, Aqua Security, and HashiCorp Vault.
• Maintain audit trails and documentation to ensure adherence to compliance standards like GDPR, HIPAA, and SOC 2.

Required Skills

• 6-10 years of experience in DevSecOps or security engineering.
• Programming and scripting proficiency in Python, Bash, Go, Ruby, or JavaScript.
• Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or CircleCI.
• Hands-on expertise with IaC tools including Terraform or Pulumi.
• Deep understanding of cloud security, IAM, and cloud-native tools like AWS GuardDuty or Azure Security Center.
• Knowledge of container security, Kubernetes RBAC, and scanning tools like Anchore or Sysdig.
• Familiarity with security testing tools including SonarQube, Semgrep, OWASP ZAP, and Snyk.
• Proficiency in secrets management using HashiCorp Vault.
• Experience with monitoring stacks such as Prometheus, Grafana, ELK, or Splunk.

Key Skills

Education

Any Graduate