DevSecOps Engineer

• Integrate security controls and best practices throughout the software development and deployment lifecycle.
  


• Develop and improve CI/CD pipelines to support secure, efficient, and reliable application releases.
  


• Automate infrastructure provisioning, configuration, and security processes using infrastructure-as-code and scripting tools.
  


• Evaluate vulnerabilities across applications, cloud environments, containers, and infrastructure, and recommend appropriate remediation measures.
  


• Implement and manage application security tools such as SAST, DAST, SCA, secrets management, and vulnerability scanning solutions.
  


• Collaborate with development, security, cloud, and operations teams to embed security into engineering processes and workflows.
  


• Strengthen cloud and container security by applying appropriate access controls, configurations, monitoring, and security standards.
  


• Review security findings, assess associated risks, and coordinate remediation activities with relevant technical teams.
  


• Support the development of DevSecOps standards, security guardrails, technical documentation, and operational procedures.
  


• Promote continuous improvement of security automation, engineering practices, and DevSecOps capabilities across technology environments.
  

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
  


• 3–5 years of relevant experience in DevOps, DevSecOps, cloud engineering, application security, cybersecurity, or a related technical field.
  


• Strong knowledge of CI/CD, infrastructure-as-code, version control, scripting or automation, container technologies, and cloud platforms such as AWS, Azure, or GCP.
  


• Practical understanding of application and infrastructure security, including vulnerability management, secure coding practices, security testing, access controls, and cloud security principles.
  


• Strong analytical, problem-solving, communication, and stakeholder management skills, with the ability to work effectively across development, security, and operations teams.