Description

Integrate automated security scanning and vulnerability management into the CI/CD pipeline to secure the development lifecycle.

This role is on-site.

Responsibilities

• Implement DAST, SAST, and IAST scanning approaches tailored to specific technology stacks.
• Configure scanning control gates, severity thresholds, and automated feedback loops for developers.
• Investigate and resolve CVEs and security vulnerabilities within Java and Python applications.
• Iteratively improve application security posture using GitLab or similar orchestration tools.
• Collaborate with customer cyber teams to align security strategies and mind maps.

Required Skills

• 8+ years of experience in DevOps and security engineering.
• Hands-on experience with DevSecOps methodologies.
• Proficiency in Java and Python security touchpoints.
• Experience managing security within AWS services.
• Practical knowledge of DAST, SAST, and IAST scanning tools.
• Ability to perform CVE investigation and remediation.
• Experience setting up automated security gates in CI/CD pipelines.

Key Skills

Education

Any Graduate