Description

You will own the engineering and automation of security controls within the development lifecycle.

Responsibilities

• Build and maintain CI/CD pipelines integrating SAST, DAST, and SCA with quality gates and merge prevention.
• Implement AVR automation for defect lifecycle management and compliance reporting.
• Develop reusable templates and IaC modules to standardize security controls across applications.
• Monitor control coverage and MTTR, publishing necessary dashboards and alerts.
• Collaborate with SMEs to resolve security onboarding issues and escalations.

Required Skills

• 5+ years in DevSecOps or Application Security engineering.
• Expertise in CI/CD platforms and pipeline-as-code implementation.
• Strong coding and scripting skills in Python, Groovy, and YAML.
• Experience with IaC Modules.
• Proficiency with CI/CD tools including GitHub Actions, Azure DevOps, and GitLab CI.
• Familiarity with security tooling: SAST, DAST, and SCA.
• Experience with observability tools such as Grafana and Prometheus.

Preferred Skills

• Experience with containers and Kubernetes security.

Key Skills

Education

Any Graduate