Description

You will integrate security practices throughout the entire DevOps lifecycle to ensure secure software development, deployment, and operations.

Responsibilities

• Embed security checks including SAST, DAST, and SCA into CI/CD workflows.
• Secure Infrastructure as Code templates and implement policies to prevent misconfigurations.
• Configure security monitoring tools and respond to incidents through root cause analysis.
• Conduct threat modeling during design phases and recommend mitigation strategies.
• Automate security tasks and tool integration to reduce manual intervention.
• Maintain audit trails to ensure adherence to compliance standards.

Required Skills

• 6+ years of professional experience in security or DevOps roles.
• Programming and scripting proficiency in Python, Bash, Go, Ruby, or JavaScript.
• Hands-on experience with CI/CD tools such as Jenkins or GitHub Actions.
• Strong understanding of authentication and authorization protocols including OAuth2, SAML, and JWT.
• Experience securing cloud infrastructure and managing Identity and Access Management (IAM).
• Knowledge of container security, including Docker and Kubernetes RBAC.
• Ability to implement and manage secrets using tools like HashiCorp Vault.
• Familiarity with Infrastructure as Code tools such as Terraform or Pulumi.
• Experience with vulnerability management and security testing tools.

Key Skills

Education

Any Graduate