Dev SecOps Engineer

• Integrate automated
  security testing (SAST, DAST, SCA, container and image scanning) into CI/CD
  pipelines, enforcing security gates before deployment.
  
• Define and maintain
  security-as-code and policy-as-code controls, including infrastructure as
  code (IaC) scanning for cloud and on-premises environments.
  
• Harden container
  and orchestration platforms such as Docker and Kubernetes, enforcing
  least-privilege access, image signing, and runtime security controls.
  
• Manage secrets,
  credentials, and certificates through centralized secrets management,
  eliminating hard-coded credentials across pipelines and services.
  
• Monitor, triage,
  and prioritize vulnerabilities across code, dependencies, images, and
  infrastructure, driving remediation with development teams against defined
  SLAs.
  
• Automate security
  baseline enforcement and compliance evidence collection across cloud and
  on-premises environments.
  
• Collaborate with
  development teams to embed secure coding practices, threat modeling, and
  security requirements early in the development cycle.
  
• Support incident
  response and post-incident reviews for security events affecting pipelines,
  infrastructure, and workloads, driving root-cause remediation.
  
• Continuously
  improve security tooling coverage and accuracy, reducing false positives and
  mean time to remediate.
  
• Participate in the on-call rotation to support
  production systems.
  

• Percentage of CI/CD pipelines with enforced
  security gates (SAST/DAST/SCA coverage).
  
• Mean time to remediate (MTTR) critical and
  high-severity vulnerabilities.
  
• Reduction in vulnerabilities reaching
  production.
  
• Compliance with security baselines across
  cloud and on-premises environments.
  
• Secrets management coverage, with zero
  hard-coded credentials in code and pipelines.
  

Requirements