Description

Drive security standards and automation within the software development lifecycle.

This role is on-site.

Responsibilities

• Develop and enforce Pipeline Security Standards across the organization.
• Automate security scans using SAST, DAST, IAST, and SCA tools within CI/CD pipelines.
• Enhance CI/CD processes by implementing secure pipeline criteria and eliminating manual workflows.
• Analyze AWS Cloud Infrastructure to improve security, management, and scalability.
• Train junior DevOps engineers on security best practices and tool integration.

Required Skills

• 8+ years of experience with CI/CD, DevSecOps technologies, and secure application practices.
• 4+ years of experience with AWS DevOps and Cloud security.
• Proficiency in creating and securing CI/CD pipelines.
• Deep understanding of secure coding principles and application development.
• Knowledge of DevOps, DevSecOps, and Security Architecture with NIST CSF.
• Experience with Infrastructure as Code (IaC) and Configuration as Code (CaC).
• Hands-on experience with scanners like SonarQube, Snyk, or OWASP ZAP.
• Experience with monitoring tools such as Prometheus, Grafana, or AWS Monitoring.

Preferred Skills

• Bachelor's degree in Computer Science, Computer Engineering, or Cyber Security.

Key Skills

Education

Any Graduate