DevSecOps & Cloud Security Consultant in Banking Domain

Urgent requirement for DevSecOps & Cloud Security Consultant in Banking Domain is required for our banking clients in Oman

·        Hands-on experience embedding automated SAST, Secret Scanning, Dependency Scanning, and Software Supply Chain Security into pipelines is MUST

·        Deep experience scanning and manually reviewing Terraform, Ansible, CloudFormation, and K8s Helm Charts is MUST 

·        Banking domain is MUST

Position Overview

The DevSecOps & Cloud Security Consultant will embed security controls directly into the software development lifecycle (SDLC), CI/CD pipelines, and cloud environments. This role focuses on shift-left security, automated code/configuration scanning, cloud infrastructure assessments, and continuous vulnerability management.

Key Details

·        Experience Required: 3–5+ Years (DevSecOps / Cloud Security Focus)

·        Domain Focus: DevSecOps Automation, Cloud Infrastructure, Container Security

·        Certifications (Preferred): CKS, CCSP, CCSK, Certified DevSecOps Professional (CDP), AWS/OCI/Huawei Cloud Security Certifications

Core Responsibilities

·        Pipeline & Code Security: Integrate and manage SAST, secret detection, dependency scanning, and container image scanning within CI/CD pipelines.

·        Infrastructure as Code (IaC) & Helm Security: Review Terraform, Ansible, ARM templates, and Kubernetes Helm charts for hardcoded secrets, excessive IAM permissions, and misconfigurations.

·        Policy Enforcement & Cloud Security: Validate Open Policy Agent (OPA) / Gatekeeper policies, assess cloud security posture (OCI, Huawei Cloud), and review network security groups (NSGs) and routing (DRGs).

·        Tool Evaluation & POCs: Design, execute, and evaluate Proofs of Concept (POCs) for security tools spanning SAST, DAST, Container Security, Cloud Security, and API Security.

Skills

·        BFSI Domain: 3–5+ yrs experience in Banking / Fintech (Strict CI/CD security for digital banking, PCI DSS, regulatory cloud baselines).

·        DevSecOps & CI/CD Security: Hands-on experience embedding automated SAST, Secret Scanning, Dependency Scanning, and Software Supply Chain Security into pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).

·        IaC & Helm Chart Audits: Deep experience scanning and manually reviewing Terraform, Ansible, CloudFormation, and K8s Helm Charts for insecure configurations, excessive IAM, and exposed secrets.

·        Cloud Security Configuration: Hands-on security posture review of Cloud Environments (OCI / Huawei Cloud / AWS / Azure), including IAM, NSGs, DRGs, encryption, and storage security.

·        Kubernetes & Policy Enforcement: Experience with K8s Security & Open Policy Agent (OPA) / Gatekeeper policy enforcement and container image scanning.

·        Vulnerability Management & Tool POCs: Track record evaluating security tooling (SAST/DAST/Cloud/Container Security), managing POCs, validating false positives, and tracking remediation.