Description

You will drive the implementation of security standards and automation within the software development lifecycle.

Responsibilities

• Contribute to the development and enforcement of the Pipeline Security Standard.
• Collaborate with development teams to automate security scans using SAST, DAST, and IAST tools.
• Enhance CI/CD processes by implementing secure pipeline criteria and eliminating manual workflows.
• Analyze AWS Cloud Infrastructure to improve security, management, and scalability.
• Train junior DevOps engineers on best practices and tool integration.

Required Skills

• 8+ years of experience with CI/CD, DevSecOps technologies, and secure application practices.
• 4+ years of experience with AWS DevOps and Cloud security.
• Proficiency in creating and securing CI/CD pipelines.
• Deep understanding of secure coding principles and application development.
• Knowledge of DevOps, DevSecOps, and Security Architecture with NIST CSF.
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC).
• Working knowledge of SAST, DAST, SCA, and IAST integration.
• Hands-on experience with scanners like SonarQube, Snyk, or OWASP ZAP.
• Experience with monitoring tools such as Prometheus, Grafana, or AWS Monitoring.

Preferred Skills

• Bachelor's degree in Computer Science, Computer Engineering, or Cyber Security.

Key Skills

Education

Any Graduate