We are looking for an experienced DevSecOps Engineer to join our team. This is a unique opportunity to shape and secure complex infrastructure at scale, working closely with engineering, security, and DevOps teams.

Requirements:

• 3+ years of hands-on experience in DevOps, Cloud Engineering, or Application Security
• Proficiency in CI/CD tools and automation scripting (Bash, Python, Go, etc.)
• Practical experience with cloud-native platforms (AWS and/or Azure)
• Strong understanding of OWASP Top 10, software supply chain security, and modern attack vectors
• Experience with security tools such as Snyk, Checkov, Trivy, Aqua
• Familiarity with Kubernetes security best practices (PodSecurityPolicy, RBAC, network policies)
• Understanding of version control, secrets management, and key management systems (e.g., Vault, AWS KMS)
• Bonus: Knowledge of compliance frameworks (SOC 2, ISO 27001, NIST, HIPAA)
• Relevant certifications are an advantage (e.g., CISSP, OSCP, AWS/GCP/Azure Security, CKA/CKS, Terraform Associate)

Key Responsibilities:

• Design and secure CI/CD pipelines using platforms such as Azure DevOps, GitHub Actions, or GitLab CI
• Harden Infrastructure-as-Code (Terraform, Helm, CloudFormation, Ansible) and enforce security policies
• Implement and monitor security controls in cloud environments (AWS, Azure, GCP)
• Integrate security tools into the development pipeline (SAST, DAST, SCA, IaC scanners)
• Conduct threat modeling and automate detection of risks across infrastructure
• Define and implement container security practices (Docker, Kubernetes, EKS/GKE/AKS)
• Collaborate on security and compliance monitoring