Purpose of the Job

We are looking for a DevSecOps Engineer with around 5 years of experience to embed security into our development and deployment pipelines. The role focuses on integrating security controls into CI/CD, improving secure coding practices, and working closely with development, operations, and security teams.

Job Description

• Integrate security tools (SAST, DAST, SCA) into CI/CD pipelines.
• Implement and maintain secure CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.
• Work with development teams to identify and remediate security vulnerabilities early in the SDLC.
• Support container and cloud security (Docker, Kubernetes, Azure/AWS).
• Enforce security best practices for infrastructure as code (IaC).
• Monitor and reduce security risks in building and deployment processes.
• Assist in security assessments, audits, and compliance requirements.
• Automate security checks and improve security visibility across pipelines.
• Collaborate with SOC and AppSec teams on vulnerability remediation.

• Integrate security tools (SAST, DAST, SCA) into CI/CD pipelines.
• Implement and maintain secure CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.
• Work with development teams to identify and remediate security vulnerabilities early in the SDLC.
• Support container and cloud security (Docker, Kubernetes, Azure/AWS).
• Enforce security best practices for infrastructure as code (IaC).
• Monitor and reduce security risks in building and deployment processes.
• Assist in security assessments, audits, and compliance requirements.
• Automate security checks and improve security visibility across pipelines.
• Collaborate with SOC and AppSec teams on vulnerability remediation.

Job Requirements - Experience and Education

• 7+ years of experience in cyber security or cloud security, DLP, EDR, threat intelligence, email security, threat hunting…etc.
• Bachelor’s degree in IT, cyber security, or any related field
• Experience with security tools such as Checkmarx, SonarQube, Fortify, or similar. (preferred)
• Knowledge of cloud security posture management (CSPM). (preferred)
• Exposure to compliance standards (ISO 27001, SOC2, PCI DSS). (preferred)
• Security certifications (AWS/Azure Security, CEH, or equivalent). (preferred)

Leadership Behaviors

Skills