Description

You will secure the software development lifecycle by integrating automated security controls into the delivery pipeline.

Responsibilities

• Implement secure CI/CD pipelines featuring automated scanning, secret management, and policy enforcement.
• Integrate SAST, DAST, SBOM generation, and compliance tracking tools into existing workflows.
• Collaborate with development and infrastructure teams to enforce secure coding and deployment practices.
• Maintain least-privilege access, code signing, and artifact integrity.
• Support security audits, vulnerability remediation, and logging/alerting frameworks.

Required Skills

• 5+ years of experience in DevSecOps, infrastructure security, or secure development roles.
• Hands-on experience with CI/CD tools including GitHub Actions, Jenkins, or Bamboo.
• Proficiency in scripting and automation using Python and Bash.
• Knowledge of container security, SBOM, and dependency scanning tools.
• Familiarity with security frameworks such as OWASP, NIST 800-53, or CJIS.
• Experience working within regulated environments.

Preferred Skills

• Experience working in environments with strict compliance and audit requirements.

Key Skills

Education

Any Gradute