DevSecOps Engineer

About the Role

Unibeam is seeking a highly skilled DevSecOps Engineer to join their team. This role bridges DevOps and Security functions, playing a key role in maintaining, securing, and enhancing cloud environments, driving security within DevOps processes, and managing SOC-related tasks. You will be part of a fast-paced team responsible for ensuring cloud infrastructure and services meet the highest security standards, integrating security practices into every development lifecycle stage.

Key Responsibilities

• Be a critical part of the DevOps team, managing the security of AWS-hosted infrastructure.
• Own and manage all security operations (SecOps) aspects, including handling and integrating all SOC tasks into the DevOps pipeline.
• Address penetration testing (PT) findings, proactively resolve vulnerabilities, and implement preventive measures.
• Drive security best practices throughout the organization, including proactively identifying risks, implementing mitigating measures, and integrating security into CI/CD pipelines.
• Lead security incident management related to Office 365 and other critical services.
• Collaborate with cross-functional teams to integrate SecOps tools, policies, and best practices into DevOps workflows.
• Monitor and secure cloud environments (AWS/GCP/Azure) through effective automation and orchestration of security tasks.
• Provide insights and solutions to all SOC findings, enabling continuous improvement of security measures.

Requirements

• 3+ years of experience as a DevSecOps engineer or in a similar role.
• Strong expertise in at least one major cloud platform (AWS, GCP, or Azure), including managing and securing cloud-native services.
• Hands-on experience with containerization technologies such as Docker and managing Kubernetes environments.
• Proven experience in building and maintaining CI/CD pipelines with a security-first approach.
• Solid understanding of networking concepts (OSI layers, TCP/IP) and key security protocols.
• Experience with monitoring tools (e.g., Datadog, Nagios, Prometheus) and log management/analysis tools (e.g., ELK stack, Splunk).
• Understanding of SOC processes, including correlation rules and incident response procedures.
• Experience automating security tasks and workflows using SOAR (Security Orchestration, Automation, and Response) or similar technologies.
• Proficiency in scripting languages (Python, Bash, etc.) to automate and streamline security processes.

Preferred Qualifications

• Extensive hands-on experience with network security, firewalls, and IDS/IPS systems.
• Knowledge of secure coding practices and experience working with development teams to ensure secure code.
• Certifications such as AWS Certified Security – Specialty, Certified Kubernetes Administrator (CKA), or Certified Information Systems Security Professional (CISSP) are a plus.